bybit-downloads[.]com

This domain, bybit-downloads.com, is identified as a brand impersonation threat targeting Bybit, a cryptocurrency trading platform. Analysis indicates the site was designed to distribute fraudulent software under the guise of the legitimate Bybit application, posing a direct risk to users seeking to download trading tools. The domain is currently offline, but prior activity suggests it was actively used for malicious distribution campaigns. Infrastructure analysis reveals the domain was registered on September 14, 2025, through OwnRegistrar, Inc., and resolved to the IP address 104.21.82.231. Security assessments show a Scamadviser trust score of 1 out of 100 and a Gridinsoft trust score of 0 out of 100, indicating high-risk classification. The domain is flagged by 7 of 95 security vendors on VirusTotal and appears on one security blocklist. The page title, 'Bybit：Download the cryptocurrency trading platform,' further confirms its intent to deceive users into downloading counterfeit software. Current status confirms the domain has been taken offline, though similar infrastructure may reemerge under different names. Users are advised to verify the authenticity of any Bybit-related downloads by accessing the official website directly via verified channels. Organizations should monitor for indicators of compromise, including the IP address 104.21.82.231 and the domain registration details, to prevent potential exposure. Blocking or sinkholing this domain at the network level is recommended to mitigate residual risk.