username3285[.]invoice-ads-agency[.]com

PhishDestroy identifies username3285.invoice-ads-agency.com as a newly activated invoice-themed phishing domain designed to steal payment credentials and sensitive billing data. The site uses a fraudulent invoice-ads-agency.com subdomain to mimic legitimate advertising billing portals, tricking users into entering login details or credit card numbers under the guise of paying an outstanding invoice. This domain currently resolves to IP address 188.114.97.3 and has already been flagged by two major security blocklists including OpenPhish and PhishingArmy, indicating active abuse in the wild. This domain was flagged after VirusTotal analysis returned zero detections out of 95 security engines on April 23, 2026, highlighting the challenge of early detection for newly registered phishing infrastructure. It was created on April 22, 2026 through Gransy, s.r.o., a registrar known to host both legitimate and malicious domains. Despite using a valid SSL certificate issued by Google Trust Services, the site exhibits multiple red flags including its recent creation date, lack of web reputation, and association with known phishing campaigns targeting advertising professionals. If you visited username3285.invoice-ads-agency.com, immediately disconnect from the site and avoid entering any personal or financial information. Scan your device using updated antivirus software and consider changing passwords for any accounts entered on the site. Report the incident to your organization's IT security team and file a complaint with the FBI's Internet Crime Complaint Center (IC3) if financial information was exposed. Monitor bank statements closely for unauthorized transactions and be alert for follow-up phishing attempts leveraging your compromised data.