bybit-invest[.]com

The domain bybit-invest.com was registered on March 22, 2026 through Global Domain Group LLC and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. and is geolocated in Canada. The authoritative name servers melany.ns.cloudflare.com and rodney.ns.cloudflare.com confirm that the domain leverages Cloudflare’s hosting infrastructure. No TLS certificate was observed for the host, meaning HTTPS connections would be unencrypted or rely on Cloudflare’s default certificate, which may be absent given the lack of an explicit certificate.

The site’s HTML title, "Авторизация | Bybit," indicates an attempt to mimic Bybit’s authentication page, aligning with the reported brand impersonation and crypto‑scam classification. Technology fingerprints include Naver Analytics, Cloudflare Browser Insights, and support for HTTP/3, all typical of Cloudflare‑served sites. VirusTotal scans recorded three detections out of ninety‑four participating vendors, confirming that multiple security products have identified malicious behavior. The domain appears on a single public blocklist, PhishDestroy, which has also taken active blocking measures.

Independent scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high likelihood of abuse. Observed evidence does not provide a full page capture, so the exact content and credential‑harvesting mechanisms remain unverified beyond the page title. Defenders should add 188.114.96.3 to network deny lists, enforce TLS inspection for traffic to the domain, and ensure that any detection rules referencing the page title or the domain name are activated. Continuous monitoring of Cloudflare‑associated IP ranges for similar brand‑impersonation patterns is recommended, as is reviewing outbound connections for attempts to reach the domain before it was taken down.