MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für bybitcloud.vip
bybitcloud[.]
Bybitcloud.vip is a fraudulent website posing as the legitimate cryptocurrency exchange Bybit in order to steal user login credentials and sensitive account information.
- VirusTotal
- 15/91
- Blocklists
- No stored match
- Verfügbarkeit
- Nicht bestätigt
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@podaon.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
bybitcloud.vip — Nicht bestätigt. Markenidentität: Bybit; Betrugstyp: Brand Impersonation. Zusammenfassung der Beweislage: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); CF Radar malicious; PhishDestroy score 95/100. Registrar: Dynadot.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
Bybitcloud.vip is a fraudulent website posing as the legitimate cryptocurrency exchange Bybit in order to steal user login credentials and sensitive account information. The site mimics Bybit’s branding and login interface, tricking visitors into entering their email addresses, passwords, and even two-factor authentication codes. Once harvested, these credentials are used to take over real Bybit accounts, drain funds, and conduct additional fraud against the victim and their contacts. This is a classic brand-impersonation attack designed to exploit trust in a well-known exchange. PhishDestroy identifies this threat using multiple security lenses. The domain was registered on March 20, 2026, through Dynadot Inc and uses a Let’s Encrypt SSL certificate to appear legitimate. VirusTotal currently flags the site with 13 out of 95 security vendors detecting malicious content, indicating a high-risk impersonation campaign already in motion. The site resolves to IP address 188.137.180.57, which has no association with Bybit’s official infrastructure. If you visited bybitcloud.vip, immediately cease using the site and assume your credentials may be compromised. Do not log in again anywhere, including on the real Bybit platform. Revoke access to your Bybit account via the official app or website, enable two-factor authentication using an authenticator app (not SMS), and scan your device for malware. Report the domain to Bybit’s official fraud team and warn contacts who may have been targeted. Treat all emails or messages referencing this site as suspicious, and always verify links by typing the official URL (bybit.com) directly into your browser.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologien · 2 identified
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 100 % KonfidenzNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of bybitcloud.vip · checked May 7, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260507-63395F Recipient: abuse@podaon.com Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.