program1[.]invoice-partners-agency[.]com

PhishDestroy identifies program1.invoice-partners-agency.com as a confirmed fake invoice phishing domain currently under active investigation. This domain is being monitored as part of a broader campaign targeting invoice-related fraud. The threat remains unverified but is classified as a high-risk impersonation due to its recent registration and suspicious SSL configuration. Users are advised to avoid interaction until further analysis is completed.

This domain was flagged by 24 of 95 VirusTotal vendors, indicating no current detections despite its questionable activity. It was registered through Gransy, s.r.o., resolves to IP 188.114.97.3, and holds an SSL certificate from Google Trust Services. The domain was created on April 20, 2026, and currently shows no presence on major blocklists. Trust scores remain neutral, but the recent creation date and lack of detections raise concerns about delayed discovery.

PhishDestroy recommends immediate caution when encountering this domain. Users should verify invoice senders through official channels and avoid clicking links or downloading attachments from suspicious emails. Organizations are advised to monitor network traffic for connections to 188.114.97.3 and block this IP if feasible. This investigation remains active, and updates will be provided as new intelligence emerges.