bybitt[.]com[.]cn

This domain, bybitt.com.cn, is an active brand impersonation site targeting the cryptocurrency exchange Bybit. The domain was created on April 7, 2026, and remains active as of this report. It resolves to IP address 154.216.106.247, hosted in Hong Kong by Digital Core Technology Co., Limited. The page title explicitly references Bybit, including terms for the official website, exchange, download, and contract trading platform in Chinese. VirusTotal data shows 6 out of 94 security vendors flagging this domain as malicious. It is listed on at least one security blocklist and has been blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt (R13), which is common for quickly established phishing sites. The nameservers are ns1.domainnamens.com and ns2.domainnamens.com. The Gridinsoft trust score is 0 out of 100, indicating high suspicion. Defenders should block this domain at the DNS and network level, and monitor for any subdomains or related infrastructure. Users who have visited the site should be warned of potential credential theft and advised to change any passwords entered on the page. The exact content of the page beyond the title has not been analysed, but the combination of brand targeting, low trust score, and security vendor flags strongly indicates a phishing operation.