invite-tracker-verify[.]com

This domain, invite-tracker-verify.com, is currently under investigation for credential phishing activity specifically targeting Microsoft 365 users. The site presents a fraudulent login interface designed to harvest corporate credentials by impersonating legitimate Microsoft authentication portals. As of the latest assessment, the domain remains active and has not been widely detected by security vendors. Analysis indicates the domain was registered on June 25, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with newly established phishing infrastructure. It resolves to the IP address 104.21.31.165, which is part of a content delivery network known to host both legitimate and malicious domains. According to VirusTotal, the domain has been flagged by 0 of 95 security vendors, suggesting it has evaded widespread detection. The SSL certificate is issued by Google Trust Services, a common certificate authority used to lend an appearance of legitimacy to phishing sites. No blocklist entries or public threat intelligence reports were identified at the time of this analysis. The current risk assessment indicates a moderate to high threat level due to the domain's active status, lack of detection by security tools, and targeting of enterprise credentials. Organizations are advised to implement network-level blocking for the domain and its resolving IP address. Endpoint protection solutions should be updated to include this domain in phishing detection rules. Users should be educated to verify the authenticity of login portals, particularly those prompting Microsoft 365 credentials, and to report any suspicious activity involving this domain. Continuous monitoring of related infrastructure is recommended to identify potential pivot domains or additional indicators of compromise.