meta-invoice[.]invoice-ads-manager[.]com

This domain is a confirmed generic phishing host actively impersonating an invoice or ads manager platform to trick users into entering payment or login credentials. Meta-invoice.invoice-ads-manager.com leverages a deceptive naming scheme to appear legitimate and harvest sensitive financial or account data under false pretenses. The threat actor behind this campaign is distributing fraudulent billing notifications to unsuspecting users, aiming to capture sensitive information through spoofed invoice portals. This domain was flagged by 16 out of 95 security vendors on VirusTotal, indicating elevated malicious activity. It was registered through Gransy, s.r.o. on April 28, 2026, and resolves to IP address 162.159.140.98. The domain is equipped with an SSL certificate issued by Google Trust Services, which may be abused to enhance credibility and bypass browser warnings. The relatively recent creation date and active phishing payload suggest a live, evolving campaign targeting users expecting legitimate financial communications. To mitigate risk, users should avoid interacting with any links or forms on this domain. Report the domain to your email provider and browser security tools. If credentials were entered, change passwords immediately and monitor financial accounts for unauthorized transactions. Organizations should consider blocking the domain and IP (162.159.140.98) at the network perimeter to prevent access from internal systems.