# Phishing sites impersonating Bybit PhishDestroy has recorded 405 phishing domains impersonating Bybit since 2025-07-19, 9 of them in the last 30 days. The most used registrars are Dynadot and PublicDomainRegistry.com; the most common TLDs are .com and .cn. The official Bybit domain is bybit.com: any other site asking for your login or wallet is not Bybit. 405Domains, all time 9Last 30 days 170Online at last check 46Confirmed takedowns ## New domains in the last 90 days Bybit phishing domains detected per day: 37 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake Bybit site Official domain: bybit.com. Words most often added to the brand in reported domains: learn, trx, duplicate, disabled, invite, aml, bybitweb, mijn, belastingdienst, copytrading. - Type the address yourself or use a bookmark; phishing links for Bybit arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Bybit will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Bybit phishing domains The 50 most recently detected domains impersonating Bybit Domain | First detected | Status at last check | Registrar | [aml-checkbot.info](https://phishdestroy.io/domain/aml-checkbot.info/) | 2026-10-21 | Offline | PublicDomainRegistry.com | [claim-bybit.app](https://phishdestroy.io/domain/claim-bybit.app/) | 2026-10-19 | Online | NICENIC | [vote-sanctum.lol](https://phishdestroy.io/domain/vote-sanctum.lol/) | 2026-10-11 | Offline | Eranet | [bybit-wallets.com](https://phishdestroy.io/domain/bybit-wallets.com/) | 2026-10-11 | Online | PublicDomainRegistry.com | [qz-bybit.com.cn](https://phishdestroy.io/domain/qz-bybit.com.cn/) | 2026-10-09 | Online | Web Commerce Communications | [bw-bybit.com.cn](https://phishdestroy.io/domain/bw-bybit.com.cn/) | 2026-10-09 | Online | Web Commerce Communications | [mantle-bybit.app](https://phishdestroy.io/domain/mantle-bybit.app/) | 2026-10-07 | Online | NICENIC | [bybits-tradefund.com](https://phishdestroy.io/domain/bybits-tradefund.com/) | 2026-09-26 | Online | PublicDomainRegistry.com | [com---en-byybit-sso.typedream.app](https://phishdestroy.io/domain/com---en-byybit-sso.typedream.app/) | 2026-09-22 | Online | Squarespace Domains II | [bit.clubdealnews.com](https://phishdestroy.io/domain/bit.clubdealnews.com/) | 2026-09-19 | Offline | DNSPod | [byit.support](https://phishdestroy.io/domain/byit.support/) | 2026-09-17 | Online | GNAME.COM | [smraflow.vip](https://phishdestroy.io/domain/smraflow.vip/) | 2026-09-15 | Online | NameSilo | [meteeora-ag.github.io](https://phishdestroy.io/domain/meteeora-ag.github.io/) | 2026-09-08 | Online | GitHub | [by-bit.cash](https://phishdestroy.io/domain/by-bit.cash/) | 2026-09-04 | Online | Name.com | [bybitxyz.com](https://phishdestroy.io/domain/bybitxyz.com/) | 2026-09-01 | Online | GoDaddy.com | [admin.bybit.im9996.cc](https://phishdestroy.io/domain/admin.bybit.im9996.cc/) | 2026-09-01 | Offline | Chengdu west dimension digital technolog | [bybitaml.icu](https://phishdestroy.io/domain/bybitaml.icu/) | 2026-08-31 | Online | NICENIC | [aerostake.app](https://phishdestroy.io/domain/aerostake.app/) | 2026-08-31 | Offline | NICENIC | [bybit-referral-code-id.vercel.app](https://phishdestroy.io/domain/bybit-referral-code-id.vercel.app/) | 2026-08-23 | Online | Vercel | [bybit-login-app.typedream.app](https://phishdestroy.io/domain/bybit-login-app.typedream.app/) | 2026-08-17 | Online | Typedream | [app----en-bybit-sso.typedream.app](https://phishdestroy.io/domain/app----en-bybit-sso.typedream.app/) | 2026-08-17 | Online | Typedream | [secure----bybit-login.typedream.app](https://phishdestroy.io/domain/secure----bybit-login.typedream.app/) | 2026-08-17 | Online | Typedream | [bybitprow.net](https://phishdestroy.io/domain/bybitprow.net/) | 2026-08-16 | Offline | Dominet (HK) | [bybltxeu.com](https://phishdestroy.io/domain/bybltxeu.com/) | 2026-08-12 | Offline | DYNADOT | [p2pbybit-audit.com](https://phishdestroy.io/domain/p2pbybit-audit.com/) | 2026-08-12 | Online | Internet Domain Service BS | [bybiititnc.com](https://phishdestroy.io/domain/bybiititnc.com/) | 2026-08-11 | Offline | Dynadot | [fybit.com](https://phishdestroy.io/domain/fybit.com/) | 2026-08-10 | Online | GoDaddy.com | [bybithje.com](https://phishdestroy.io/domain/bybithje.com/) | 2026-08-09 | Offline | Dynadot | [byblyteho.com](https://phishdestroy.io/domain/byblyteho.com/) | 2026-08-06 | Offline | Dynadot | [bybit-login.created.app](https://phishdestroy.io/domain/bybit-login.created.app/) | 2026-08-05 | Online | Created App | [chainlinkcoin.net](https://phishdestroy.io/domain/chainlinkcoin.net/) | 2026-08-05 | Online | DYNADOT | [byycart.com](https://phishdestroy.io/domain/byycart.com/) | 2026-07-31 | Online | Gname.com | [bybitrifuhvidvjsdnkjvnsdjki.netlify.app](https://phishdestroy.io/domain/bybitrifuhvidvjsdnkjvnsdjki.netlify.app/) | 2026-07-29 | Offline | Netlify | [amlxbybit.org](https://phishdestroy.io/domain/amlxbybit.org/) | 2026-07-29 | Offline | Trustname.com | [confidence-point.uk](https://phishdestroy.io/domain/confidence-point.uk/) | 2026-07-29 | Offline | Cloudflare, [Tag = CLOUDFLARE] | [prosbybit.com](https://phishdestroy.io/domain/prosbybit.com/) | 2026-07-28 | Online | NameSilo | [bybit-tradefunds.com](https://phishdestroy.io/domain/bybit-tradefunds.com/) | 2026-07-27 | Offline | HOSTINGER operations | [pc.hyextechnogoy.cc](https://phishdestroy.io/domain/pc.hyextechnogoy.cc/) | 2026-07-23 | Online | Gname.com | [bybitliquid.com](https://phishdestroy.io/domain/bybitliquid.com/) | 2026-07-17 | Online | Dominet (HK) | [bybitamlverification.online](https://phishdestroy.io/domain/bybitamlverification.online/) | 2026-07-15 | Online | Ultahost | [bybitspoe.com](https://phishdestroy.io/domain/bybitspoe.com/) | 2026-07-13 | Offline | Dynadot | [oeruexta.com](https://phishdestroy.io/domain/oeruexta.com/) | 2026-07-12 | Offline | DYNADOT | [exehbiit.cfd](https://phishdestroy.io/domain/exehbiit.cfd/) | 2026-07-10 | Online | Gname.com | [bybltix.com](https://phishdestroy.io/domain/bybltix.com/) | 2026-07-05 | Offline | Dynadot | [bybesitop.com](https://phishdestroy.io/domain/bybesitop.com/) | 2026-07-04 | Offline | DYNADOT | [bybit-bonus.xyz](https://phishdestroy.io/domain/bybit-bonus.xyz/) | 2026-07-03 | Online | Onamae.com | [byvotes-bybit.xyz](https://phishdestroy.io/domain/byvotes-bybit.xyz/) | 2026-06-26 | Offline | HOSTINGER operations | [auditscan.uk](https://phishdestroy.io/domain/auditscan.uk/) | 2026-06-26 | Online | Namecheap, [Tag = NAMECHEAP-] | [bybit456.xyz](https://phishdestroy.io/domain/bybit456.xyz/) | 2026-06-26 | Online | Dominet (HK) | [bybit456.vip](https://phishdestroy.io/domain/bybit456.vip/) | 2026-06-26 | Online | Dominet (HK) | [All 405 Bybit reports](https://phishdestroy.io/domain/?brand=Bybit) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)32 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)31 - [Gname.com](https://phishdestroy.io/registrar/name-com/)25 - Cloudflare20 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)20 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)19 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)19 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)18 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)152 - [.cn](https://phishdestroy.io/tld/cn/)36 - [.app](https://phishdestroy.io/tld/app/)22 - [.xyz](https://phishdestroy.io/tld/xyz/)14 - [.net](https://phishdestroy.io/tld/net/)13 - [.dev](https://phishdestroy.io/tld/dev/)13 - [.org](https://phishdestroy.io/tld/org/)12 - [.info](https://phishdestroy.io/tld/info/)10 ### Hosting networks - Cloudflare, Inc.107 - CLOUDFLARENET, US52 - POWER LINE DATACENTER29 - ML-1432-54994, CA14 - CLOUDFLARENET - Cloudflare, Inc., US13 - ROUTERHOSTING, US11 - AUROLOGIC aurologic GmbH, DE9 - Amazon.com, Inc.9 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bybit; share of all PhishDestroy reports: 0.18%. Canonical: https://phishdestroy.io/brand/bybit/