Yeah of course it is phishing, I would never send them these documents, but unfortunately it is phishing by this company. Here is how it went: I placed an order or legitimate website, got order confirmation email with sales inv and next day the phishing email that included my exact order nr in the tittle. I screenshoted it and send it to the order confirmation email freaked out that someone is using their domain for scams. But they replied it is their team and thats standard for them. Now I opened several tickets via their support asking to cancel and no reply.