com-invoice[.]my

This domain, com-invoice.my, is flagged as a high-risk generic phishing site with no direct brand impersonation identified. Analysis indicates it is designed to mimic invoice-related communications, likely targeting corporate or financial sectors to harvest credentials or distribute malicious payloads. No specific drainer kit signatures have been confirmed, but the infrastructure aligns with known phishing campaigns leveraging fake billing or payment portals. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 12, 2026, through Atak Domain Bilgi Teknolojileri AS and currently resolves to IP address 104.21.27.107. It is detected by 14 out of 95 security vendors on VirusTotal, appears on 1 security blocklist, and uses an SSL certificate issued by Google Trust Services (WE1). The page title, "com-invoice.my | 521: Web server is down," suggests either a temporary takedown or deliberate misconfiguration to evade detection. As of the latest assessment, com-invoice.my remains active and unblocked by major web filtering systems outside of a single security vendor. Response actions should include immediate blacklisting of the domain and IP, monitoring for related subdomains or newly registered lookalike domains, and alerting users to verify invoice-related communications through official channels. The remaining risk is elevated due to the domain's recent registration, low detection rate, and potential for credential theft or malware distribution.