Phishing sites impersonating Bybit

PhishDestroy has recorded 405 phishing domains impersonating Bybit since 2025-07-19, 9 of them in the last 30 days. The most used registrars are Dynadot and PublicDomainRegistry.com; the most common TLDs are .com and .cn. The official Bybit domain is bybit.com: any other site asking for your login or wallet is not Bybit.

405
Domains, all time
9
Last 30 days
170
Online at last check
46
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 12026-07-29: 32026-07-30: 02026-07-31: 12026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 22026-08-06: 12026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 12026-08-11: 12026-08-12: 22026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 12026-08-17: 32026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 12026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 22026-09-01: 22026-09-02: 02026-09-03: 02026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 12026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 12026-09-16: 02026-09-17: 12026-09-18: 02026-09-19: 12026-09-20: 02026-09-21: 02026-09-22: 12026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 12026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 12026-10-08: 02026-10-09: 22026-10-10: 02026-10-11: 22026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 12026-10-20: 02026-10-21: 12026-10-22: 0
Bybit phishing domains detected per day: 37 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake Bybit site

Official domain: bybit.com.

Words most often added to the brand in reported domains: learn, trx, duplicate, disabled, invite, aml, bybitweb, mijn, belastingdienst, copytrading.

  • Type the address yourself or use a bookmark; phishing links for Bybit arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Bybit will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Bybit phishing domains

The 50 most recently detected domains impersonating Bybit
DomainFirst detectedStatus at last checkRegistrar
aml-checkbot.info2026-10-21OfflinePublicDomainRegistry.com
claim-bybit.app2026-10-19OnlineNICENIC
vote-sanctum.lol2026-10-11OfflineEranet
bybit-wallets.com2026-10-11OnlinePublicDomainRegistry.com
qz-bybit.com.cn2026-10-09OnlineWeb Commerce Communications
bw-bybit.com.cn2026-10-09OnlineWeb Commerce Communications
mantle-bybit.app2026-10-07OnlineNICENIC
bybits-tradefund.com2026-09-26OnlinePublicDomainRegistry.com
com---en-byybit-sso.typedream.app2026-09-22OnlineSquarespace Domains II
bit.clubdealnews.com2026-09-19OfflineDNSPod
byit.support2026-09-17OnlineGNAME.COM
smraflow.vip2026-09-15OnlineNameSilo
meteeora-ag.github.io2026-09-08OnlineGitHub
by-bit.cash2026-09-04OnlineName.com
bybitxyz.com2026-09-01OnlineGoDaddy.com
admin.bybit.im9996.cc2026-09-01OfflineChengdu west dimension digital technolog
bybitaml.icu2026-08-31OnlineNICENIC
aerostake.app2026-08-31OfflineNICENIC
bybit-referral-code-id.vercel.app2026-08-23OnlineVercel
bybit-login-app.typedream.app2026-08-17OnlineTypedream
app----en-bybit-sso.typedream.app2026-08-17OnlineTypedream
secure----bybit-login.typedream.app2026-08-17OnlineTypedream
bybitprow.net2026-08-16OfflineDominet (HK)
bybltxeu.com2026-08-12OfflineDYNADOT
p2pbybit-audit.com2026-08-12OnlineInternet Domain Service BS
bybiititnc.com2026-08-11OfflineDynadot
fybit.com2026-08-10OnlineGoDaddy.com
bybithje.com2026-08-09OfflineDynadot
byblyteho.com2026-08-06OfflineDynadot
bybit-login.created.app2026-08-05OnlineCreated App
chainlinkcoin.net2026-08-05OnlineDYNADOT
byycart.com2026-07-31OnlineGname.com
bybitrifuhvidvjsdnkjvnsdjki.netlify.app2026-07-29OfflineNetlify
amlxbybit.org2026-07-29OfflineTrustname.com
confidence-point.uk2026-07-29OfflineCloudflare, [Tag = CLOUDFLARE]
prosbybit.com2026-07-28OnlineNameSilo
bybit-tradefunds.com2026-07-27OfflineHOSTINGER operations
pc.hyextechnogoy.cc2026-07-23OnlineGname.com
bybitliquid.com2026-07-17OnlineDominet (HK)
bybitamlverification.online2026-07-15OnlineUltahost
bybitspoe.com2026-07-13OfflineDynadot
oeruexta.com2026-07-12OfflineDYNADOT
exehbiit.cfd2026-07-10OnlineGname.com
bybltix.com2026-07-05OfflineDynadot
bybesitop.com2026-07-04OfflineDYNADOT
bybit-bonus.xyz2026-07-03OnlineOnamae.com
byvotes-bybit.xyz2026-06-26OfflineHOSTINGER operations
auditscan.uk2026-06-26OnlineNamecheap, [Tag = NAMECHEAP-]
bybit456.xyz2026-06-26OnlineDominet (HK)
bybit456.vip2026-06-26OnlineDominet (HK)

All 405 Bybit reports

Where they are registered and hosted

Registrars

  1. Dynadot32
  2. PublicDomainRegistry.com31
  3. Gname.com25
  4. Cloudflare20
  5. GoDaddy.com20
  6. NameSilo19
  7. Web Commerce Communications19
  8. Dynadot18

Top-level domains

  1. .com152
  2. .cn36
  3. .app22
  4. .xyz14
  5. .net13
  6. .dev13
  7. .org12
  8. .info10

Hosting networks

  1. Cloudflare, Inc.107
  2. CLOUDFLARENET, US52
  3. POWER LINE DATACENTER29
  4. ML-1432-54994, CA14
  5. CLOUDFLARENET - Cloudflare, Inc., US13
  6. ROUTERHOSTING, US11
  7. AUROLOGIC aurologic GmbH, DE9
  8. Amazon.com, Inc.9

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bybit; share of all PhishDestroy reports: 0.18%.