injective-enroll[.]com

This domain is flagged as a credential harvesting phishing site targeting users through deceptive enrollment-themed lures. Analysis indicates the infrastructure is designed to mimic legitimate service sign-up pages, capturing sensitive login credentials, personal data, or financial information under false pretenses. The domain employs social engineering tactics, including urgency and authority cues, to manipulate victims into disclosing confidential details without verification of authenticity. Infrastructure analysis reveals the domain was registered on June 13, 2026, through NameSilo, LLC, a registrar frequently associated with malicious registrations. It currently resolves to IP address 172.67.133.86, a hosting provider commonly used to obfuscate origin. The domain appears on one security blocklist, and VirusTotal reports 1 out of 95 security vendors have detected it as malicious. The SSL certificate is issued by Google Trust Services (WE1), which does not mitigate the threat but may lend false legitimacy to unsuspecting users. The page title 'Just a moment...' suggests the use of anti-scraping or cloaking techniques to evade automated detection. Users who have visited injective-enroll.com or interacted with its content should immediately revoke any entered credentials, particularly for financial, cryptocurrency, or identity-related services. Monitor accounts associated with the email or username used on the site for unauthorized access or transactions. Reset passwords using a secure, non-compromised device, and enable multi-factor authentication where available. Report the domain to internal security teams or threat intelligence platforms to support broader mitigation efforts. Avoid further interaction with the domain or any linked resources, as they may deploy additional payloads or redirect to secondary malicious infrastructure.