trust-bybit[.]one

The domain trust-bybit.one was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 172.86.92.178, which is assigned to AS30823 operated by aurologic GmbH in Germany. The site presented a page title of "Bybit Audit," indicating a crypto‑related focus, and its scam classification is listed as a Crypto Scam that impersonates the Bybit exchange. The SSL certificate attached to the domain is identified only as "E8," providing no evidence of a trusted certificate authority.

Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 out of 100, and Gridinsoft reports a score of 0 out of 100. Threat‑intel aggregators have flagged the domain on at least one security blocklist and it is specifically blocked by the PhishDestroy service. AlienVault OTX contains two pulses that reference the domain, confirming its inclusion in broader threat‑sharing feeds.

VirusTotal analysis shows that 18 of 93 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of hostile activity. Given the alignment of brand impersonation, low trust scores, and multiple vendor detections, defenders should proactively block the domain and the associated IP at perimeter and endpoint controls, monitor for any residual DNS or HTTP traffic, and consider extending detection rules to cover similar Bybit‑related naming patterns. Continuous watch on the AS30823 network may uncover additional infrastructure linked to the same operator.