injective-votes[.]xyz

On 23 July 2026 the domain injective-votes.xyz was observed to be offline but retains a set of technical indicators that are consistent with a phishing infrastructure. The domain was created on 25 May 2026 and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Authoritative name servers are adam.ns.cloudflare.com and danica.ns.cloudflare.com, both operated by Cloudflare DNS. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States.

No TLS certificate is presented for the domain, confirming that any web service would be delivered over plain HTTP. A Gridinsoft trust score of 0 / 100 classifies the domain as highly untrusted. VirusTotal records show that four of ninety‑one scanning engines flagged the domain, providing independent confirmation of malicious intent. The domain is listed on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, further reinforcing its classification as a phishing resource.

No page title, targeted brand, or payload description is available in the current intelligence, so the exact social‑engineering technique employed by the site cannot be identified at this stage. The combination of recent registration, Cloudflare‑based hosting, lack of HTTPS, low trust score, and multiple blocklist listings suggests a deliberately short‑lived operation designed to evade rapid takedown. Defenders should continue to monitor DNS queries for injective‑votes.xyz and its associated IP address, enforce existing blocklist rules in firewalls and endpoint protection, and consider adding the domain to internal deny lists. Although the site currently returns no HTTP response, any future re‑activation would likely be observable through the same infrastructure fingerprints, allowing rapid detection and mitigation.