invoice-system[.]invoice-ads-program[.]com

This domain, invoice-system.invoice-ads-program.com, is a live crypto-drainer phishing page designed to trick visitors into connecting a cryptocurrency wallet and silently draining funds. It impersonates an official invoice or ads-program portal while prompting wallet connections under the guise of “processing payments” or “verifying accounts.” Once a wallet is linked, malicious scripts execute unauthorized transfers to attacker-controlled addresses, often using chain-hopping bridges to obscure the trail. Visitors should treat any unexpected “invoice” or “ads payout” link with extreme caution to avoid irreversible losses. PhishDestroy identifies this domain as actively malicious. VirusTotal’s latest scan shows 16 of 95 participating security vendors have flagged the site as harmful. Domain registration records reveal it was created on April 23, 2026, just days ago, and is currently routed through Gransy, s.r.o., resolving to IP address 162.159.140.98. Its SSL certificate is issued by Google Trust Services, which does not guarantee legitimacy—malicious actors routinely obtain valid certificates to appear trustworthy. If you visited this site or connected a wallet, disconnect it from the internet immediately and revoke any suspicious permissions using your wallet’s official access portal. Transfer remaining assets to a newly generated wallet on a clean device. Scan your system with reputable antivirus and password managers to check for compromise. Report the wallet addresses and any transaction hashes to the relevant blockchain explorers and your local cybercrime unit. Always verify links via PhishDestroy or trusted security sources before interacting with financial portals.