Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@iqweb.io.
The latest stored availability evidence still shows the domain reachable; 14 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
justlend-defi[.]org
“JustLend DeFi â Earn Interest & Borrow TRX, USDT, USDC”
justlend-defi.org — असत्यापित. ब्रांड प्रतिरूपण: Aave; घोटाले का प्रकार: Crypto Drainer. साक्ष्य सारांश: VirusTotal 4/91 (alphaMountain.ai, Ermes, Gridinsoft, SOCRadar); PhishDestroy score 65/100. रजिस्ट्रार: Fewmoretaps OU d/b/a T….
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
justlend-defi.org was registered on July 29, 2026 through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to the IPv4 address 186.2.175.35 and uses four name servers: ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz. It has been added to a single security blocklist and is currently listed as blocked by PhishDestroy. VirusTotal reports that the domain has been scanned by 91 AV engines, none of which have raised a detection; this result should not be interpreted as a safety assurance.
The threat classification supplied in the intelligence is "crypto drainer," indicating that the site is intended to solicit cryptocurrency deposits and then exfiltrate the funds. No public SSL certificate information, HTTP response codes, or page title data are available, so the surface‑level behavior of the web server cannot be verified at this time. The lack of additional blocklist entries or reputation scores suggests that the infrastructure is newly deployed, consistent with the recent registration date. Defenders should treat the domain as active and potentially malicious, especially in environments that process cryptocurrency transactions.
Recommended actions include adding the domain and its resolved IP address to deny lists, monitoring DNS queries for lookups to ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz, and enabling outbound traffic controls that block unauthorized transfers to addresses associated with the domain. Continuous re‑scan of the domain with multiple AV engines and periodic checks against emerging blocklists are advised to capture any future detections. Until further forensic evidence is obtained, the safest posture is to assume the site will attempt to drain crypto assets and to enforce strict network segmentation for wallet services.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
थ्रेट इंटेलिजेंस क्रॉस-रेफ़रेंस · source references
तकनीकें · 2 identified
Modernizr is a JavaScript library that detects the features available in a user's browser.
modernizr.com 100% विश्वासDDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260801-389610 Recipient: abuse@iqweb.io क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।