coinpaymentsinvoice[.]net

The domain www.coinpaymentsinvoice.net is a confirmed phishing site engaged in brand impersonation targeting users of the gaming platform CSGO. It operates as a cryptocurrency scam, presenting itself as a legitimate payment or invoice service to deceive victims into transferring digital assets. The site has been taken offline, but it previously posed an elevated risk due to its fraudulent activity under the guise of the CSGO brand. No drainer kit was identified in this campaign, though the threat type remains significant for those who may have interacted with it.

Technical indicators confirm the malicious nature of www.coinpaymentsinvoice.net. The domain was flagged by 5 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and CyRadar, and appears on one security blocklist (PhishDestroy). It was created on February 21, 2026, and resolved to the IP address 104.21.58.149, hosted on Cloudflare's infrastructure in the US. The SSL certificate was issued by WE1, and the observed page title was 'AML Check'. AlienVault OTX recorded the domain in one threat intelligence pulse, further corroborating its association with phishing activity.

Victims of www.coinpaymentsinvoice.net should take immediate steps to secure their assets and accounts. For cryptocurrency-related scams, revoke any token approvals granted to suspicious sites and transfer remaining funds to a new wallet. If login credentials were exposed, change passwords immediately and enable two-factor authentication on all related accounts. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.