injhub[.]com

The domain injhub.com is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It specifically mimics Binance, a major cryptocurrency exchange, to deceive victims into believing they are accessing legitimate DeFi services. The site was designed to facilitate cryptocurrency scams, though no drainer kit was identified. As of the latest verification, injhub.com has been taken offline.

Technical indicators confirm the malicious nature of injhub.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through NameCheap, Inc. on December 24, 2023, and resolved to the IPv6 address 2600:9000:2479:a800:3:638e:3bc0:93a1, hosted on Amazon Web Services in the US. The SSL certificate was issued by Amazon RSA 2048 M04, and the observed page title was 'Injective Hub - Access Unlimited DeFi Markets'. Technologies detected on the site include Node.js, Vue.js, Nuxt.js, and Amazon S3. AlienVault OTX recorded the domain in 1 threat intelligence pulse, and Gridinsoft assigned it a trust score of 39 out of 100.

Users who interacted with injhub.com should assume their credentials or wallet details may be compromised. For cryptocurrency-related exposure, revoke any token approvals granted to the site and transfer funds to a new, secure wallet. If login credentials were entered, change passwords immediately and enable two-factor authentication on all related accounts. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.