ScanMalware.com

Security Scan Report: webmail.bybitsupport.org

Site favicon
Submitted: Sep 14, 2026, 8:42:57 PMCompleted: Sep 14, 2026, 8:44:15 PMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is webmail.bybitsupport.org and was registered 2 weeks ago.

Submitted URL: https://webmail.bybitsupport.org

AI Security Verdict

Low Risk

Confidence: 70%

3
Risk Score

18-day-old, unranked domain named after Bybit's support channel hosts a Roundcube webmail credential login. No IoC or malware hits, but the new brand-mimicking domain plus credential capture make it high-risk.

Risk Factors
Domain only 18 days old (VERY_NEW, 2.0x risk multiplier)
Unranked in Cisco Umbrella (no established reputation)
Credential-entry (webmail login) portal on a newly registered domain
Domain name imitates a well-known cryptocurrency exchange's support service
Classifier flagged the phishing-scam category
Safety Factors
No Indicators of Compromise matched against the page or its resources
No JavaScript malware / YARA patterns detected
No cross-origin form submissions or credential exfiltration detected
Roundcube is legitimate open-source webmail software, not malware
No payment or card fields present
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(45%)

Domain Information

You're looking at domain 'webmail.bybitsupport.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'webmail'. The second-level label 'bybitsupport' is 12 characters long holding 3 vowels versus 9 consonants. Breaking it apart gives three words: by, bit, support. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmail.bybitsupport.org

Page Load Overview

75.47s
Total Load Time
2
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:238 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
45%
phishing scam
42%
technology software
41%
news media journalism
36%
adult content
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.127.225.238Moscow, Moscow, Russia
AS56694LLC Smart Ape
01--

Page Statistics

0
Requests
0
Unique Domains
0.0 KB
Total Size

Detected Technologies5

PasswordField
100%
PHP
50%
RoundCube
30%
jQuery UI
20%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E1148B3AC00883F1571011D9849F69CE4ED587991757D10F4AF173D1DF8FAD84AE991

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hRZrYfNg7YDnyLmgd7ZV4VzxEGj0h2PmgLcAuPmfnrPmZPX6mzqx9QFOvmRVh+Bt:hRZsGkDnOmWZKJDLcA9edmSqmRVkByG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:974:AEAEAAAAgAAAAAAAAAIIIBAAAIAAAAAAAAABAAEAAAAAABAaAAAABIAAAAIAAAAQIAAAAgEAIACAAAAQAAABAAAAAACEEkAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7ffffffff
Perceptual Hash:b333cccc64339999
Difference Hash:00080c0c00000000
Wavelet Hash:ffe7e7e700000000
Color Hash:#937e1f

Other Hashes

Crop Resistant:00080c0c00000000

Scan History

Scan history not available

Unable to load historical scan data