injective[.]events

Injective.events is currently flagged by multiple anti‑phishing services as a high‑risk generic phishing infrastructure. The domain was registered on 21 February 2026 and resolves to the Cloudflare‑owned address 188.114.96.3, which is advertised as being located in the United States under ASN 13335. HTTP requests to the site return a 522 “Connection timed out” response, and the only visible page title is “gifts‑injective.net | 522: Connection timed out”, indicating that the site is not serving content at the time of analysis. Reputation services assign the domain extremely low scores: Scamadviser rates it 16 / 100, Gridinsoft rates it 0 / 100, and it appears on three external blocklists.

The domain is listed in a single AlienVault OTX pulse and has been flagged by eleven of ninety‑three VirusTotal scanners. It is also blocked by the commercial phishing‑filter vendors PhishDestroy, ScamSniffer, and Enkrypt. The SSL certificate is identified only by the label “WE1”, suggesting a weak or self‑signed certificate.

No further details about the targeted brand, landing page layout, or malicious payload have been published, so the exact phishing vector remains uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the IP address, and add the host to internal allow‑list exclusions only after thorough verification. Ongoing observation of the associated IP and any new DNS records is recommended, as the infrastructure could be repurposed for future campaigns.