justlend-dex[.]org

The domain justlend-dex.org was registered on July 11, 2026 through Spaceship, Inc. and is currently resolved to the IPv4 address 186.2.175.35. Its authoritative name servers are launch1.spaceship.net and launch2.spaceship.net, indicating that the registrar’s infrastructure is being used for DNS resolution. The domain appears on a single public blocklist, where it is listed by PhishDestroy as an active malicious resource.

VirusTotal has recorded a single positive detection out of 91 scanned security vendors, confirming that at least one vendor has flagged the domain as suspicious. No additional intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information is presently available, limiting the depth of technical attribution. The limited detection footprint suggests that the site may be newly deployed or operating under a low‑profile configuration, but the presence on a blocklist and the positive VirusTotal flag indicate a non‑trivial risk to users.

Defenders should block or sinkhole the IP address 186.2.175.35, enforce DNS filtering for the domain justlend-dex.org, and monitor any future activity associated with the launch*.spaceship.net name servers. Continuous re‑evaluation of VirusTotal and other vendor feeds is recommended, as additional detections may emerge as the campaign matures.