lista-org--airdrop[.]pages[.]dev

The domain lista-org--airdrop.pages.dev is currently under investigation for potential brand impersonation related to airdrop scams. This domain was designed to mimic legitimate services by presenting itself under the guise of 'ListaDAO - A Simple and Permissionless Liquid Staking and CDP Stablecoin Lending Protocol.' The domain is presently offline.

The domain has been flagged by 0 of 95 vendors on VirusTotal, which indicates that recognition of this threat is not yet widespread among antivirus solutions. However, it appears on four major security blocklists, including MetaMask, PhishDestroy, SEAL, and ScamSniffer. These inclusions suggest a consensus about its malicious nature among security experts. The domain resolves to IP address 172.66.44.184, and was registered with Cloudflare, Inc. on April 6, 2026. Notably, it has a Gridinsoft trust score of 0 out of 100, underscoring its lack of credibility.

Given that the domain is currently offline, immediate direct threat has been mitigated. However, there remains a risk of resurrection or replication of similar threats. It is recommended that users remain vigilant against unsolicited communications related to airdrop offers and verify the legitimacy of such offers through official channels. Security teams should ensure that their systems are updated with the latest threat intelligence feeds that include this domain and others on similar blocklists. They should also consider reinforcing user education on recognizing phishing attempts.