abedinbybit2-arch[.]github[.]io

PhishDestroy identifies active brand impersonation campaign targeting Bybit users via domain abedinbybit2-arch.github.io, a high-risk crypto drainer operating under false pretenses. This phishing infrastructure masquerades as Bybit to deceive victims into connecting crypto wallets or divulging credentials. The domain leverages a drainer kit designed to siphon crypto assets upon interaction, exploiting brand trust associated with Bybit's cryptocurrency exchange platform.

Technical indicators confirm malicious intent: VirusTotal detection rate stands at 14 out of 95 security vendors, while Google Safe Browsing classifies the domain under SOCIAL_ENGINEERING. Hosting details reveal resolution to IP 185.199.110.153 with a Let's Encrypt SSL certificate, registered through GitHub, Inc. The domain currently appears on one security blocklist and is actively blocked by OpenPhish. Despite GitHub's legitimate infrastructure, the presence of malicious content subverts platform safeguards.

This domain remains active as of the latest analysis and poses immediate risk to uninformed users. Immediate remediation includes network-level blocking via DNS/URL filtering and user awareness training to recognize Bybit impersonation tactics. Remaining risk is high due to continuous operation, certificate rotation, and platform spoofing capabilities. Users should avoid interacting with this domain entirely and report any suspicious activity to Bybit's official support channels.