justlisting[.]in

This domain, justlisting.in, was registered on March 04 2026 through a major registrar and is currently active. Intelligence classifies the site as a banking‑phishing operation, targeting users by mimicking legitimate financial services. The domain resolves to a single IPv4 address and is listed on a known phishing blocklist.

The host address 50.6.250.46 belongs to an autonomous system operated by a large cloud provider in the United States. The domain uses the registrar’s default nameservers ns09.domaincontrol.com and ns10.domaincontrol.com, suggesting no custom DNS configuration. An SSL certificate issued by a public certificate authority is present, and the server announces LiteSpeed web server software with HTTP/3 support, indicating a modern web stack.

Reputation services provide strong indications of malicious intent. Sixteen of ninety‑five security scanners on a public analysis platform flag the domain, and a widely used safe‑browsing list marks it for social‑engineering content. Despite returning HTTP 200, the page title reports “404 Not Found”, a common technique to hide phishing content behind a generic response. The domain also appears on a dedicated phishing blocklist.

Current gaps include the lack of publicly disclosed payload or credential‑harvesting pages, leaving the exact phishing workflow unknown. Defenders should add the IP address and domain to network‑level block lists, enforce TLS inspection to detect the certificate, and monitor for any new subdomains created under the same registrar. End‑user awareness campaigns should highlight the banking‑phishing theme and advise verification of URLs before credential entry.