bybit[.]assetincidentreport[.]com

PhishDestroy identifies bybit.assetincidentreport.com as an active brand impersonation domain targeting the Bybit cryptocurrency exchange. This malicious site leverages Bybit’s branding to deceive visitors into surrendering sensitive credentials or installing malicious payloads. The domain remains active and is currently under investigation for expanded fraudulent operations.

This domain was flagged by 1 of 95 VirusTotal vendors as of the latest scan, indicating minimal detection coverage despite its malicious intent. The domain was registered through HOSTINGER operations, UAB, and resolves to IP address 92.113.16.191. The domain was created on January 19, 2026, and utilizes a Let's Encrypt SSL certificate to enhance its perceived legitimacy. No public blocklist entries or trust score data are currently available for this domain.

Users and organizations are advised to immediately block access to bybit.assetincidentreport.com and avoid any interaction with the domain. Security teams should monitor network traffic for connections to the associated IP address (92.113.16.191) and scan endpoints for indicators of compromise. Reporting the domain to threat intelligence platforms and cybersecurity authorities is strongly encouraged to prevent further victimization. Caution should be exercised with any unsolicited communications referencing Bybit to avoid credential theft or financial loss.