paybis-download[.]pages[.]dev
“Paybis Login — Sicherer Zugriff & Best Practices”
paybis-download.pages.dev — Konten tidak tersedia. Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 1/91 (ChainPatrol); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy has identified paybis-download.pages.dev as a generic phishing domain designed to impersonate the legitimate Paybis cryptocurrency platform. The domain is currently offline, but it posed an elevated risk to users who may have encountered it while seeking access to their Paybis accounts. The site was hosted on Cloudflare infrastructure and resolved to IP address 172.66.44.250, with an SSL certificate issued by Google Trust Services. The page title was "Paybis Login — Sicherer Zugriff & Best Practices," indicating an attempt to appear as an official German-language login page. The domain was created on November 04, 2025, and registered through Cloudflare, Inc.
According to security telemetry, the domain was flagged by 1 out of 95 security vendors on VirusTotal, and it appeared on at least three security blocklists. While the low vendor detection rate might suggest the domain was not widely recognized as malicious, the combination of brand impersonation, recent creation, and blocklist presence warranted a risk assessment of elevated. PhishDestroy's own analysis confirmed the phishing nature of the site, which likely aimed to steal user credentials and sensitive account information through fraudulent login forms.
Given that paybis-download.pages.dev is now offline, users who may have visited the site should take immediate precautions. It is strongly recommended to change any passwords entered on the page and enable two-factor authentication on their real Paybis accounts. Users should also monitor their accounts for unauthorized activity and report any suspicious transactions. To avoid future threats, always verify the official domain of any service before entering login credentials, and rely on trusted bookmarks rather than search engine results or unsolicited links. PhishDestroy continues to monitor for similar threats and advises the public to remain vigilant against phishing attempts targeting cryptocurrency platforms.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive