paybislogin-io-us[.]pages[.]dev

The domain paybislogin-io-us.pages.dev has been identified as a credential phishing threat, specifically impersonating the Paybis cryptocurrency exchange login page. This domain is currently active and poses a high risk to users who may be tricked into entering their login credentials. The page title, "Paybis Login — Anleitung, Fehlerbehebung & Sicherheitstipps," is designed to appear legitimate, but the site is a fraudulent attempt to steal sensitive information.

Technical analysis reveals that this domain was created on November 08, 2025, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services / WE1. VirusTotal reports that 3 out of 95 security vendors flag this domain as malicious, and it appears on 3 security blocklists. These indicators confirm the domain's malicious nature and its active status in the wild.

Given the high risk level and active status, users are strongly advised to avoid interacting with paybislogin-io-us.pages.dev. PhishDestroy recommends verifying any login pages through official channels and never entering credentials on untrusted sites. If you have already submitted information, change your passwords immediately and enable two-factor authentication on your accounts.