sport-defillmma-airdrop[.]pages[.]dev

The domain sport-defillmma-airdrop.pages.dev is a phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform Across. It presents itself as a legitimate airdrop campaign under the false pretense of 'DefiLlama Airdrop – Unlock DeFi Rewards Smartly,' aiming to deceive victims into connecting wallets or divulging sensitive information. No drainer kit was identified, and the site is currently taken offline, though its prior activity remains a confirmed scam.

Technical analysis reveals that sport-defillmma-airdrop.pages.dev was flagged by Google Safe Browsing for social engineering, though it registered 0 of 95 detections on VirusTotal. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 172.66.44.104, hosted by Cloudflare in the US. It appears on one security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services (WE1). The site employed HSTS, Cloudflare, and HTTP/3 technologies, with nameservers elly.ns.cloudflare.com and devin.ns.cloudflare.com. The observed HTTP status was 403 at the time of assessment.

Victims of sport-defillmma-airdrop.pages.dev should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet to mitigate potential losses. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to Google Safe Browsing, PhishTank, or the impersonated brand (Across) to aid in takedown efforts. Monitor financial accounts for unauthorized transactions and remain vigilant for further phishing attempts.