evri[.]tracktw[.]top

The domain evri.tracktw.top was registered on June 12, 2026 through Dominet (HK) Limited and is currently listed as active with an elevated risk rating. It appears on one security blocklist and is explicitly blocked by the PhishDestroy filtering service, indicating that at least one reputable anti‑phishing organization has taken mitigation action against it. A VirusTotal scan shows that 12 of 91 security vendors flag the domain as malicious, a detection rate that aligns with typical phishing infrastructure and reinforces the classification of the site as a generic phishing resource.

The available intelligence does not provide page titles, SSL certificate details, hosting IP addresses, or any observed HTTP response codes, so the exact landing‑page behavior and the specific credential‑harvesting mechanisms remain unverified. Nonetheless, the convergence of blocklist presence, vendor detections, and the registrar’s Hong‑Kong location suggests a purpose‑built operation aimed at luring users into divulging sensitive information.

Defenders should immediately block DNS resolution for evri.tracktw.top, add the domain to network‑level URL filtering and intrusion‑prevention rules, and monitor outbound traffic for any attempted connections. Continuous re‑evaluation is advised as additional indicators—such as hosting infrastructure or page content—become available, and the domain should be shared with broader threat‑intel communities to enhance collective detection capabilities.