bybitpartner[.]com

bybitpartner.com was registered on May 02, 2023 and resolves to the IP address 172.66.47.78, which belongs to the Cloudflare network (AS13335) located in the United States. The domain is hosted through Megazone Corp., operating under the dba HOSTING.KR name, and is served by a single nameserver. No SSL certificate was observed for the site, indicating that it operated only over HTTP. The site was classified as a crypto‑scam that impersonates the Bybit cryptocurrency exchange, and it was flagged by a single vendor on VirusTotal (1 of 95 detections).

Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on one external security blocklist. PhishDestroy has already taken the domain offline, and its current status is listed as offline. The combination of a zero trust score, lack of encryption, and confirmed impersonation of a financial brand suggests a high likelihood of credential harvesting or financial loss attempts.

Defenders should add 172.66.47.78 and bybitpartner.com to network‑level deny lists, ensure that any outbound connections to the Cloudflare IP range are monitored for anomalous activity, and verify that endpoint protection solutions include the domain in their URL filtering rules. Continuous monitoring of newly registered domains that contain the “bybit” keyword or that resolve to the same Cloudflare ASN is recommended, as threat actors often reuse infrastructure. Incident response teams should also review any authentication logs for possible credential submissions to this domain before it was taken down, and consider notifying users of Bybit to remain vigilant for unsolicited communications that reference “bybitpartner.com”.