bybitviai[.]com

The domain bybitviai.com was identified as a brand impersonation threat targeting Bybit, a popular cryptocurrency exchange. This domain was registered with the intent to deceive users into believing they were interacting with legitimate Bybit services. No specific drainer kit was associated with this domain, but the impersonation alone poses significant risk to users who may inadvertently disclose sensitive information.

Technical indicators show that bybitviai.com was flagged by 9 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain was registered through Cloudflare, Inc., and resolves to IP address 188.114.97.3. It was created on April 7, 2026, and uses an SSL certificate from Let's Encrypt (E7), which is common for phishing sites. The domain appears on 1 security blocklist, reflecting limited but active threat intelligence sharing. Google Safe Browsing status was not specified, but the domain's current offline status suggests it was taken down before causing widespread harm.

As of the latest check, bybitviai.com is offline, meaning it no longer resolves or serves malicious content. The domain was taken down following detection, likely through registrar action or hosting provider intervention. However, residual risk remains as similar domains may appear under different names. Users are advised to always verify URLs carefully, especially when dealing with financial platforms like Bybit, and to avoid entering credentials on unsolicited links. PhishDestroy recommends enabling multi-factor authentication and using browser security extensions to block known phishing domains.