Figured everyone should be aware. If you see bitpay.org that isn't them and probably this attacker. The official Bitpay always uses bitpay.com for messaging. I am a user myself and hate to see anyone lose funds for some scammer on the prowl. Glad you seen this, hope more do and don't run into issues.