bybitgum[.]com

Analysis indicates that bybitgum.com is an active brand‑impersonation site targeting Bybit users. The domain was registered on 21 Feb 2026 through CSC Corporate Domains, Inc. and resolves to 43.174.58.57, an address located in Singapore under AS139341 (ACE). The host presents an Amazon‑issued RSA‑2048 certificate (Amazon RSA 2048 M04) and uses Amazon ELB front‑end services, Nginx with OpenResty, and a React application delivered over HTTPS with HSTS. Authentication widgets for Google and Apple are detected, suggesting attempts to capture third‑party credentials. The page title returned is “Buy”, but no further content has been analyzed. VirusTotal reports 13 of 93 security vendors flagging the domain, and AlienVault OTX references it in 17 threat‑intel pulses. The site is already listed on PhishDestroy and PhishingDB, and Gridinsoft assigns it a trust score of 0/100. Defenders should block the IP address 43.174.58.57 and the domain itself at DNS and proxy layers, add the host to internal blocklists, and monitor for similar domains registered by the same registrar or using the same AWS name‑servers. Users should be warned that any unsolicited Bybit‑related purchase offers from bybitgum.com are fraudulent, and credential‑sharing via Google or Apple sign‑in should be treated as compromised.