bybit-pz[.]com[.]cn

PhishDestroy identifies bybit-pz.com.cn as a newly registered fraudulent domain designed to impersonate the legitimate cryptocurrency exchange Bybit. This site operates as a crypto drainer, tricking users into connecting their wallets or entering login credentials under the guise of Bybit services. The threat is active and currently under investigation, with no detections on VirusTotal as of the last analysis. This domain resolves to IP 154.216.119.22 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 27, 2026, a suspiciously recent creation date indicative of opportunistic fraud. Despite its lack of detection on VirusTotal (2/95), the domain holds an SSL certificate issued by Let’s Encrypt, which may lend false credibility to unsuspecting users. PublicDomainRegistry is a common registrar for bulk-registered domains, often exploited for short-lived phishing operations. Users who visited bybit-pz.com.cn should immediately disconnect any connected wallets, revoke any unauthorized permissions, and scan their devices using a trusted security tool. Avoid entering any credentials or cryptocurrency transaction approvals on this domain. PhishDestroy recommends verifying any Bybit-related links through official channels before interaction. If you suspect exposure, run a free scan on PhishDestroy to check for compromise.