joininvite[.]click

The domain joininvite.click is flagged for generic_phishing and has no specific brand or drainer kit association. The domain's infrastructure and technical indicators suggest a high risk of phishing attacks. Analysis indicates that this domain has been registered through NameSilo, LLC, and resolves to the IP address 104.225.128.78. The domain was created on March 12, 2026, and has been flagged by 16 out of 95 security vendors on VirusTotal. Additionally, it appears on 4 security blocklists, including MetaMask, PhishDestroy, SEAL, and Maltrail. The detected technologies include LiteSpeed and HTTP/3, which are commonly used in web server configurations but can also be indicative of a sophisticated phishing setup.

As of the latest assessment, the domain joininvite.click has been taken offline. However, the fact that it was previously active and widely flagged by multiple security vendors suggests that it was used for malicious activities. The high detection rate on VirusTotal (16/95) and its presence on multiple blocklists further confirm the domain's involvement in phishing operations. The page title 'Index of /Windows/' is unusual and may indicate that the domain was used to serve malicious files or to masquerade as a legitimate directory.

While the domain is currently offline, the residual risk remains due to the potential for reactivation or similar domain registration by the same actor. Users and organizations are advised to remain vigilant and update their threat intelligence databases to prevent any future phishing attempts. Continuous monitoring of network traffic and user activity is recommended to detect and mitigate any related threats.