bybitlz[.]com[.]cn

PhishDestroy identifies BybitLZ.com.cn as a fraudulent domain designed to impersonate the legitimate cryptocurrency exchange Bybit. This site specifically targets users by mimicking the official Bybit interface to trick visitors into entering their login credentials, which are then harvested by cybercriminals. The domain was registered on March 26, 2026, and currently shows no detections on VirusTotal despite its malicious intent, indicating a low but dangerous profile that could evade detection by standard security tools. This domain was flagged by PhishDestroy’s automated threat analysis system after confirming it as a brand impersonation attempt. VirusTotal’s scan shows 0 detections out of 95 antivirus engines as of the latest analysis, illustrating how new or subtle threats can slip through conventional defenses. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP address 154.216.106.252. It also holds a valid SSL certificate issued by Let’s Encrypt, which may give users a false sense of security. These technical indicators suggest the operators are using reputable services to appear legitimate, increasing the risk of successful deception. If you visited BybitLZ.com.cn, immediately stop using any credentials you entered and change your passwords on the official Bybit website using a trusted bookmark or verified URL. Do not click on any links from this domain or download files from it. Clear your browser cache and run a malware scan on your device using up-to-date security software. Report the domain to Bybit’s official support and consider notifying your internet service provider or local cybersecurity authority. Stay safe by always double-checking domain names and using multi-factor authentication on all financial accounts.