live-citrea[.]xyz

The domain live-citrea.xyz, hosted on IP 104.21.45.119, is a phishing threat identified on its creation date, 2026-05-25. Despite being offline now, it appeared on three public blocklists, including PhishDestroy, MetaMask, and SEAL, highlighting its malicious intent. The domain lacks an SSL certificate, which is typical for phishing sites seeking to evade detection.

With 0 of 95 detections on VirusTotal, live-citrea.xyz exemplifies the early stages of a phishing campaign. This indicates the domain was likely registered and deployed rapidly to exploit the time gap before antivirus databases update. PhishDestroy's detection pipeline captured this domain during this critical pre-propagation window, emphasizing the importance of early threat identification.

Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, live-citrea.xyz has a platform risk score of 60/100. This score suggests a moderate threat level, potentially targeting users through deceptive means. The absence of a specific brand association points to a generic phishing operation, which could involve fake login pages or credential harvesting schemes. The domain's swift takedown mitigates immediate risks, but its initial activity underscores the need for continuous monitoring of newly registered domains.