bybit-listngs[.]com

Analysis of the domain bybit-listngs.com indicates a confirmed crypto scam targeting Bybit, a cryptocurrency exchange. The domain was registered on December 5, 2025, through HOSTINGER operations, UAB, and is currently offline as of the report date. Infrastructure analysis reveals the domain resolves to the IP address 84.32.84.32, hosted under AS47583 (Hostinger International Limited) in Lithuania. The nameservers ns1.dns-parking.com and ns2.dns-parking.com are associated with parking services, and the page title explicitly states 'Parked Domain name on Hostinger DNS system,' suggesting minimal active content at the time of detection. No SSL certificate was observed, increasing the risk of unencrypted communications if the domain were to become active.

Detection data shows the domain appears on one security blocklist and is flagged in one AlienVault OTX threat intelligence pulse. VirusTotal reports 10 of 95 security vendors marking the domain as malicious, confirming its classification as a phishing or scam resource. The domain is blocked by PhishDestroy, further validating its malicious intent. While the exact content of the site remains unanalyzed, the available evidence—including the domain name, registration details, and detection counts—strongly supports its use in brand impersonation targeting Bybit users.

Defenders should treat this domain as a high-risk resource. Network-level blocking is recommended for the domain and its associated IP (84.32.84.32). Monitoring for re-registration or changes in hosting infrastructure is advised, as threat actors may attempt to reactivate the domain under different nameservers or hosting providers. Given the domain's offline status, further forensic analysis of its historical content is not currently feasible, but retrospective checks of logs for connections to the IP or domain may reveal prior compromise attempts.