username9765[.]invoice-ads-agency[.]com

The domain username976.invoice-ads-agency.com is currently flagged as an active credential phishing threat. Analysis indicates this infrastructure is designed to impersonate authentication portals, as evidenced by the page title 'Accounts Centre,' suggesting an attempt to harvest user login credentials through deceptive interfaces. No specific brand impersonation is confirmed, though the naming convention implies a focus on financial or advertising-related services. Infrastructure analysis reveals the domain was registered on April 26, 2026, through Gransy, s.r.o., and resolves to the IP address 188.114.96.3, hosted by a content delivery network provider in Canada. Security vendor detections on VirusTotal report 23 of 95 engines flagging this domain as malicious. The domain appears on one security blocklist and is associated with an SSL certificate issued by Google Trust Services (WE1). Additional intelligence sources confirm active blocking by at least one threat intelligence platform. Current status indicates the domain remains operational and poses an elevated risk to users. Organizations and individuals are advised to implement immediate network-level blocking of the domain and its resolving IP address. Security teams should monitor for related indicators of compromise, including the registrar (Gransy, s.r.o.) and SSL certificate issuer, which may be reused in future campaigns. End-users should be educated on recognizing credential phishing attempts, particularly those leveraging generic 'Accounts Centre' page titles.