injective-vote[.]lat

The domain injective-vote.lat was registered on 2026-08-05 through Global Domain Group LLC and is currently active. DNS resolution points to the public IP address 104.21.79.82, which is hosted by Cloudflare as indicated by the authoritative nameservers jo.ns.cloudflare.com and lex.ns.cloudflare.com. The domain appears on three reputable security blocklists and has been explicitly flagged by PhishDestroy, MetaMask, and SEAL, confirming a high‑risk phishing classification.

VirusTotal has recorded 91 vendor submissions without a positive detection, but the lack of alerts does not constitute assurance of safety. No additional intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title has been disclosed, leaving the content of the landing page unverified. Infrastructure analysis suggests the operator selected a recently created domain and leveraged Cloudflare’s edge network to conceal the true hosting environment, a common tactic for short‑lived phishing campaigns.

Defenders should immediately incorporate injective‑vote.lat into outbound and inbound filtering policies, enforce DNS sinkholing where possible, and monitor the associated IP address for anomalous traffic patterns. Continuous re‑evaluation is advised, as the domain may evolve or spawn new malicious payloads. Attribution and further content inspection remain pending until the site is accessed in a controlled environment.