bybit-oy[.]com[.]cn

PhishDestroy identifies bybit-oy.com.cn as an active brand impersonation phishing site targeting Bybit users. This domain is designed to deceive visitors into entering login credentials or financial information by mimicking the legitimate Bybit exchange interface. Visitors may encounter realistic login pages, fake promotions, or urgent “account suspension” notices to pressure immediate action. Once credentials are submitted, attackers harvest them for account takeovers, fund theft, or further fraudulent activity. Users who enter information risk unauthorized transactions and potential identity theft if additional personal data is requested.

This domain was flagged by PhishDestroy based on confirmed security intelligence. VirusTotal reports only 1 out of 95 security vendors currently detect this domain as malicious. The site resolves to IP address 154.216.119.23 and uses a legitimate Let’s Encrypt SSL certificate to appear trustworthy. While SSL encryption secures data in transit, it does not guarantee the site’s legitimacy. The domain was registered through an unknown registrar and leverages a misspelled variation of Bybit’s name to bypass basic filters and reach potential victims through phishing emails, social media, or malicious ads.

If you visited bybit-oy.com.cn, stop using any entered credentials immediately. Change your Bybit password on the official site using a secure, verified connection. Enable two-factor authentication (2FA) if not already active. Scan your device with updated antivirus software and monitor bank accounts for unauthorized activity. Report the domain to Bybit’s fraud team and avoid clicking any links in suspicious communications. Use official channels to verify promotions or support requests. Stay vigilant—phishing sites often disappear quickly, but recovered data can be exploited long-term.