lfj-dex[.]com

This domain, lfj-dex.com, was registered on July 24, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently resolving to the IPv4 address 186.2.175.109. The authoritative name servers listed for the zone are ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, indicating the use of both Trustname‑owned and anycast DNS providers. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filtering service, yet it remains reachable and is classified as active as of the report date, August 04, 2026.

VirusTotal analysis shows that 2 of 91 scanning engines have issued a detection for the domain, confirming that at least a subset of security products consider it malicious. No additional public intelligence such as page title, SSL certificate details, HTTP response codes, or content analysis is presently available, leaving the exact phishing payload and targeted brand undefined. The limited detection coverage and the recent creation date suggest a short‑lived campaign that relies on rapid domain turnover.

Defenders should add lfj-dex.com to local deny lists, enforce DNS sinkholing for the associated IP address, and monitor traffic to the listed name servers for anomalous queries. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in detection status. Organizations employing email gateways or web proxies should ensure that filters reference the latest blocklist entries that include this domain, and threat‑intel teams should track the registrar and name‑server infrastructure for potential reuse in subsequent campaigns.