user14[.]invoice-partners-agency[.]com

This domain, user14.invoice-partners-agency.com, is identified as a fake login portal designed to harvest user credentials. The phishing page displays the title 'Accounts Centre,' mimicking legitimate authentication portals to deceive targets. Analysis confirms the domain is currently offline, though prior activity aligns with credential theft campaigns. Infrastructure analysis reveals the domain was registered on April 24, 2026, through Gransy, s.r.o. It resolves to the IP address 188.114.96.3, hosted behind CloudFlare, Inc. infrastructure in Canada. Security vendors on VirusTotal flagged the domain, with 24 of 95 engines detecting malicious activity. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1). These indicators collectively confirm its use in phishing operations. The domain is currently offline, but residual risk remains for users who may have interacted with it prior to takedown. Organizations should block the domain and associated IP at perimeter defenses. Users who entered credentials on this portal should assume compromise and rotate passwords immediately. Security teams are advised to monitor for related infrastructure, particularly domains registered through the same registrar or resolving to the same IP range.