DNS/CDN/frontend hash drift
JustLend DAO's assessment for RD-F-105 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
DNS/frontend hash drift — T-09 phase-2 signal; applicable (substrate-agnostic). No current drift detected on justlend.org. Active impersonation domains exist (justlend-dao.com confirmed phishing; multiple typedream/teachable wallet pages). These are separate impersonator domains, not drift of the legitimate justlend.org domain. Legitimate frontend hash baseline not established in pipeline; no change-management feed configured.
Sources #
- URLURLScan — justlend-dao.com domain recordURLScan record for justlend-dao.com — domain first scanned August 2023, active phishing content confirmedretrieved 2026-05-17
- Curator assessment — pipeline gap for JustLend frontend monitoringPipeline does not monitor TRON-substrate protocol frontends. Frontend hash baseline for app.justlend.org not established. Impersonation domains are separate from the legitimate domain's drift detection.retrieved 2026-05-17
Methodology #
Detect whether the hash of production frontend JS changes versus the prior published hash, or a DNS config change is detected.
See the full factor methodology and distribution across all protocols →