paybis[.]lv

Analysis of the domain paybis.lv indicates that it is actively engaged in brand impersonation, specifically targeting the Bitcoin brand. The domain is designed to deceive users into believing they are interacting with a legitimate Bitcoin service, potentially leading to financial loss or the compromise of sensitive information.

Infrastructure analysis reveals that paybis.lv resolves to the IP address 104.20.7.169 and is hosted on Amazon Web Services. The domain appears on 2 security blocklists and is blocked by PhishDestroy and OISD. VirusTotal reports that 3 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain is associated with several technologies, including Apple iCloud Mail, Vue.js, Stripe, Atlassian Statuspage, Zendesk, Twitter Ads, and Mixpanel, indicating a sophisticated setup to appear legitimate.

Users who have visited paybis.lv should immediately check their financial accounts for any unauthorized transactions and monitor their credit card statements. If any suspicious activity is detected, users should report it to their bank and consider filing a report with local law enforcement. It is also recommended that users change their passwords and enable two-factor authentication on all relevant accounts to prevent further unauthorized access.