invitetrracker[.]xyz

PhishDestroy identifies invitetrracker.xyz as an active phishing domain designed to mimic a legitimate tracking service and trick visitors into entering their usernames and passwords. The site presents a convincing login portal that claims to grant access to a “package tracking” or “invitation tracking” service. Once credentials are submitted, they are immediately harvested by attackers and can be used to take over real accounts on other platforms where users reuse passwords. This type of attack is particularly dangerous because it plays on urgency—users expect to check an order or invitation and may act quickly without scrutinizing the page. This domain was flagged through automated threat intelligence on May 09, 2026, just days after it was registered through Dynadot LLC. VirusTotal analysis conducted at the time revealed that only 1 out of 95 participating security vendors identified the domain as malicious during the initial scan. The site uses a legitimate SSL certificate issued by Let's Encrypt to appear trustworthy and resolves to the IP address 104.21.27.69, which hosts multiple dubious domains. Its recent creation and low detection rate indicate it is part of a fast-moving campaign likely targeting unsuspecting users through email spam or fake social media notifications. If you visited invitetrracker.xyz, immediately change the password on any account where you may have entered login details—especially if you reused the same email or password elsewhere. Enable two-factor authentication wherever possible to add an extra layer of security. Run a full antivirus scan on your device to check for any installed malware that could capture further credentials. Report the incident to your IT team or security provider and avoid clicking any links in follow-up emails claiming to be from delivery services or invitations. Always verify URLs directly with the official source before entering sensitive information. Stay vigilant, as attackers may reuse this domain or related infrastructure in future campaigns.