meteora-app[.]live

The domain meteora-app.live has been identified as a phishing threat, with 17 out of 93 VirusTotal vendors marking it as malicious. Although the site is currently offline, it was hosted on IP address 188.114.97.3, under the organization Cloudflare, Inc., in the United States. The domain was registered through OwnRegistrar, Inc., and used an SSL certificate issued by Google Trust Services.

PhishDestroy added meteora-app.live to its public blocklist, marking it as a confirmed threat. The domain's page title, "Just a moment...", suggests it may have employed a deceptive technique to delay users while malicious scripts executed in the background. This tactic is common in phishing schemes, where users are tricked into divulging sensitive information.

Despite being taken down, meteora-app.live's prior activity highlights the importance of early detection. PhishDestroy's proactive measures, identifying the threat before its domain creation date, underscore the effectiveness of upstream threat intelligence in catching phishing domains during their initial stages. This approach is crucial in mitigating risks before they propagate widely across antivirus databases.