dao-justlend[.]org

The domain dao-justlend.org was registered on July 11, 2026 through Spaceship, Inc. and is currently resolving to the IPv4 address 186.2.175.35. Its authoritative name servers are launch1.spaceship.net and launch2.spaceship.net, indicating that the domain is hosted on the Spaceship infrastructure. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, confirming that defenders have already taken mitigation steps. VirusTotal analysis shows that 1 of 91 scanning engines flagged the domain, providing an additional indicator of malicious intent.

The domain’s status is listed as active as of the report date, July 29, 2026, and no evidence of takedown has been observed. No public SSL certificate details, HTTP response codes, or page title information are available, so the exact content served by the site remains unverified. The limited detection footprint—only a single blocklist entry and a single vendor flag—suggests that the phishing infrastructure is newly deployed and may be attempting to evade broader detection.

Defenders should add dao-justlend.org to local deny lists, monitor traffic to the associated IP 186.2.175.35, and enforce URL filtering policies that block connections to the identified nameservers launch1.spaceship.net and launch2.spaceship.net. Continuous re‑scanning of the domain with multiple vendor engines is recommended to capture any escalation in detection rates. Until further forensic analysis of the hosted pages is performed, the domain should be treated as a high‑risk phishing vector targeting users who may be lured by the “justlend” terminology.