user2[.]invoice-partners-agency[.]com

The domain user2.invoice-partners-agency.com has been identified as a generic phishing site designed to impersonate an Accounts Centre login portal. Analysis indicates this infrastructure is actively used to harvest credentials through deceptive login interfaces. The domain currently remains offline following takedown procedures. Infrastructure analysis reveals the domain was registered on April 24, 2026, through the registrar Gransy, s.r.o. It resolves to the IP address 188.114.97.3, geolocated to Canada and associated with a content delivery network provider. Security vendors have flagged this domain in 23 of 95 VirusTotal detections, while it appears on a single security blocklist. The SSL certificate is issued by Google Trust Services under the WE1 intermediate authority, adding a veneer of legitimacy to the malicious endpoint. As of the latest assessment, the domain has been taken offline, though residual risk persists for users who may have interacted with it prior to deactivation. Organizations are advised to block the domain and IP address at perimeter security controls, conduct retrospective log analysis for connections to 188.114.97.3, and implement multi-factor authentication to mitigate credential theft risks. End users should verify the authenticity of any Accounts Centre-related communications and report suspicious login attempts to their security teams.