bybit-up[.]com

Domain bybit-up.com was detected as a malicious site impersonating the popular cryptocurrency exchange Bybit, posing a significant risk to unsuspecting users. This site likely attempts to mimic Bybit's official platforms to trick visitors into entering sensitive credentials or transferring cryptocurrency to attacker-controlled wallets. Brand impersonation in the crypto space is frequently used by threat actors to capitalize on trust in well-known platforms, especially during periods of high market activity. By replicating the legitimate site's design and branding, attackers aim to deceive users into unknowingly exposing their private keys, login details, or initiating unauthorized transactions. This domain was flagged based on multiple indicators of compromise. VirusTotal analysis reveals that 4 out of 95 security vendors have already identified this domain as malicious, highlighting its suspicious nature. The domain was registered through Gname.com Pte. Ltd. on April 29, 2026, a relatively recent creation that aligns with the tactics of opportunistic threat actors leveraging newly registered domains for short-lived campaigns. Further scrutiny reveals the domain resolves to the IP address 34.124.210.152 and utilizes a valid Let's Encrypt SSL certificate, measures often employed to appear legitimate and evade basic security checks by unsuspecting users. The combination of these factors elevates the risk level, as the domain demonstrates clear intent to deceive visitors by impersonating a trusted brand in the cryptocurrency ecosystem. If you have visited bybit-up.com, disconnect from the internet immediately and run a full antivirus scan on your device. Avoid entering any login credentials, private keys, or sensitive information on the site. If you provided any details, change your passwords immediately on the official Bybit platform and enable two-factor authentication if not already activated. Report the domain to your security team or platform administrators to ensure others are protected from similar threats. Always verify the authenticity of websites by checking the official domain (bybit.com) and ensuring secure HTTPS connections with valid certificates. When in doubt, navigate directly to the legitimate platform's official website rather than clicking on unverified links.