pa6bis[.]com

This domain, pa6bis.com, is flagged for posing an elevated risk of Google brand impersonation. The site impersonates Google, potentially leading users to believe they are interacting with a legitimate Google service, which can result in the theft of sensitive information such as login credentials and financial data. The domain's primary purpose appears to be facilitating fraudulent transactions, as indicated by the page title 'Buy Bitcoin with Credit Card or Debit Card Instantly | Paybis', which suggests a scheme to lure users into making unauthorized payments.

Infrastructure analysis reveals that pa6bis.com was registered through Danesco Trading Ltd. on November 15, 2021. The domain resolves to the IP address 136.243.255.72. According to VirusTotal, 3 out of 95 security vendors have flagged this domain as malicious, and it appears on 1 security blocklist. The low detection rate by security vendors, coupled with the domain's recent creation date, suggests that it may have been part of a targeted campaign designed to evade initial detection.

If users have visited pa6bis.com, they should immediately check their Google account for any unauthorized activity and consider changing their passwords. Additionally, users should review their credit card and bank statements for any suspicious transactions. It is recommended to report any suspicious activity to the relevant financial institutions and to Google. Users should also install and update their security software to protect against similar threats in the future.