bybitcard[.]ru

PhishDestroy has identified bybitcard.ru as a confirmed brand impersonation domain specifically targeting the cryptocurrency exchange Bybit. This malicious site is now offline, but its existence posed a significant threat to users who may have mistaken it for an official Bybit platform. The domain was created on February 21, 2026, and registered through REGRU-RU, a Russian registrar often associated with phishing operations.

Technical analysis reveals that bybitcard.ru resolved to IP address 176.57.66.117 and used an SSL certificate issued by Let's Encrypt (R13), a common tactic to lend false legitimacy. Despite its blank page title, the domain was flagged by 2 out of 95 VirusTotal security vendors and appeared on at least one security blocklist. These indicators, combined with the brand impersonation of Bybit, classify this site as an elevated-risk threat designed to deceive users into revealing sensitive information.

As of the latest check, bybitcard.ru has been taken offline, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this domain change their Bybit account credentials immediately and enable two-factor authentication. Always verify URLs by navigating directly to official websites and avoid clicking links in unsolicited messages. For further protection, use a reputable anti-phishing tool and report any suspicious domains to relevant authorities.