justlend-site[.]github[.]io

This domain, justlend-site.github.io, is actively flagged for brand impersonation targeting CoinGecko, a known cryptocurrency data platform. Infrastructure analysis reveals the domain was registered on July 30, 2025, through GitHub, Inc., and resolves to the IP address 185.199.110.153, a host commonly associated with GitHub Pages. The page title 'JustLend' does not match the impersonated brand, suggesting either a misconfiguration or an attempt to obscure the true nature of the site. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Two of 95 security vendors on VirusTotal have flagged this domain, indicating potential malicious activity, though the specific nature of the threat remains unverified through direct content analysis. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious sites, and no anomalous certificate details are present. Technologies detected include Varnish, GitHub Pages, Sectigo, HSTS, and Fastly, which are consistent with standard web hosting infrastructure but do not rule out malicious use. The domain's trust score is 0/100, reinforcing concerns about its legitimacy. Defenders should treat this domain as high-risk and prioritize blocking or monitoring its resolution within their networks. Further investigation into user interactions with this domain is recommended to assess potential credential harvesting or cryptocurrency-related fraud. The domain remains active as of July 12, 2026, and no takedown efforts have been confirmed.