bybit-guide[.]ru

PhishDestroy identifies bybit-guide.ru as an active brand impersonation phishing domain targeting Bybit users. This domain was flagged for mimicking the official Bybit platform, potentially tricking users into disclosing credentials or financial details. The threat is currently under investigation but remains accessible. Users should exercise caution when encountering this domain, as it resolves to 185.199.108.153 and uses a Let’s Encrypt SSL certificate to appear legitimate. This domain exhibits multiple red flags: it has 0 detections on VirusTotal out of 95 engines, was registered through REGRU-RU on April 30, 2026, and appears to be a recent addition to the phishing landscape. The impersonation is evident in its naming and branding, which closely resembles Bybit’s official site. The lack of detections on VirusTotal suggests a low flagging rate, but this does not guarantee safety. Security researchers continue monitoring this domain. If you have visited bybit-guide.ru, assume compromise and take immediate action. Do not enter any credentials or financial information. Clear browser cache and cookies, run a malware scan, and change passwords for any accounts entered on the site. Report the domain to your security team or use PhishDestroy’s tools to block it. Avoid interacting with this domain further to prevent potential data theft or malware delivery.