citstg[.]com

citstg.com is a phishing domain engaged in brand impersonation, specifically targeting the Chainlink brand. This domain poses an elevated risk as it attempts to deceive users into believing it is associated with Chainlink, a legitimate blockchain platform. The site has been taken offline, but its prior activity indicates a scam designed to steal sensitive information or credentials. No drainer kit was detected on this domain, suggesting the threat is focused on credential harvesting rather than cryptocurrency theft.

Technical indicators for citstg.com show it was flagged by 1 of 95 VirusTotal vendors, including Gridinsoft, and appears on 1 security blocklist, PhishDestroy. The domain was registered through NameCheap, Inc. on May 13, 2025, and resolves to IP address 198.27.109.55, located in Canada (AS16276 OVH SAS). The SSL certificate for the site was issued by R11, and the observed page title was 'faq – citstg.com'. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score is 0 out of 100, indicating high suspicion.

Users who may have interacted with citstg.com should take immediate safety steps. Since this is a brand impersonation phishing scam, change any passwords used on the site and enable two-factor authentication on all accounts. Monitor for unauthorized transactions or account access, and report the domain to relevant authorities such as the impersonated brand (Chainlink) and cybersecurity organizations. If any credentials were entered, assume they are compromised and act accordingly.