invitetrackerr[.]xyz

PhishDestroy identifies invitetrackerr.xyz as an active credential-harvesting domain operating at an elevated risk level. This domain mimics tracking services to trick users into surrendering login credentials or personal information, posing a direct threat to account security.

This domain was flagged by 1 out of 95 VirusTotal security vendors, registered through Dynadot LLC on May 11, 2026, and resolves to IP 172.67.199.94 with a Let’s Encrypt SSL certificate. The creation date suggests a recent campaign, and the low detection rate—1/95—indicates limited visibility across security platforms, increasing the risk of exposure to unsuspecting users.

Users should avoid interacting with invitetrackerr.xyz entirely, as any input—such as usernames, passwords, or payment details—could be harvested by attackers. Organizations should block the domain and IP at the network perimeter and educate users about the risks of fake tracking services. Domain registries should investigate this registration for potential abuse patterns.