magiceden[.]shop

The domain magiceden.shop is a phishing site engaged in brand impersonation targeting Magic Eden, a well-known cryptocurrency platform. It poses as the legitimate Magic Eden service to deceive users into disclosing sensitive information or performing actions that could compromise their accounts. As of the latest verification, magiceden.shop has been taken offline, though its prior activity remains a concern for potential victims. No crypto drainer kit was identified in this case, but the site’s impersonation tactics align with credential phishing and fraudulent login schemes.

Technical indicators for magiceden.shop show minimal detection at present, with 0 of 95 VirusTotal vendors flagging the domain. The domain was registered through HOSTINGER operations, UAB, on December 09, 2024, and resolves to the IP address 34.120.137.41, hosted by Google LLC in the US. It appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer, and has a Gridinsoft trust score of 0 out of 100. No SSL certificate was observed, and the page title displayed was simply 'magiceden.shop'.

Users who interacted with magiceden.shop should immediately change their Magic Eden account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or logins. If cryptocurrency or wallet interactions occurred, revoke any token approvals granted to unknown or suspicious contracts. Report the phishing domain to Magic Eden’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.