bybitenphg[.]com

PhishDestroy identifies bybitenphg.com as a brand impersonation phishing domain masquerading as Bybit to steal cryptocurrency assets. This fraudulent site exploits the Bybit brand’s reputation to deceive users into connecting wallets or entering credentials, enabling unauthorized fund transfers. The domain uses HTTPS (Google Trust Services certificate) to appear legitimate, while the underlying malicious intent remains clear through its impersonation tactics and suspicious infrastructure.

This domain was flagged with one detection on VirusTotal and resolves to IP 104.18.20.48. It was registered via Dynadot Inc on April 12, 2026, a recently created domain leveraged to evade blacklists. The low detection count does not reflect safety—many crypto drainers fly under the radar until post-exploitation activity is reported. Users should avoid interacting with this domain and treat it as a confirmed threat vector.

If you accessed bybitenphg.com, disconnect your wallet immediately and revoke any granted permissions through the official Bybit app or wallet settings. Do not enter credentials or connect devices. Report the domain to your wallet provider and security team. Monitor your wallet for unauthorized transactions and consider rotating exposed private keys if necessary.