lista-org[.]orss01[.]dev

The domain lista-org.orss01.dev is currently active and resolves to the IPv4 address 198.187.29.211. Infrastructure analysis shows that the domain is already listed on a single security blocklist and has been blocked by the PhishDestroy sinkhole, indicating that it has been observed delivering phishing content. VirusTotal records show the domain was submitted to 91 scanning vendors; none of those vendors raised a detection at the time of analysis, but the absence of detections does not constitute evidence of benign behavior.

The domain’s authoritative name servers could not be resolved (NS_NOT_FOUND), which limits the ability to assess registrar details, DNSSEC status, or potential fallback infrastructure. No information on SSL/TLS configuration, HTTP response codes, Safe Browsing verdicts, OTX mentions, registrar identity, trust‑score metrics, page title, or supplemental evidence links was present in the supplied data. Given the limited visibility, the primary confidence factor is the active resolution to a known IP and the existing blocklist entry.

Defenders should continue to monitor DNS queries for lista-org.orss01.dev, enforce outbound filtering to block traffic to the associated IP address, and consider adding the domain to internal deny lists. Ongoing re‑scans with VirusTotal and other multi‑engine services are recommended to capture any future malicious payloads that may be associated with the domain.