bityardx[.]com

This domain is flagged as a generic phishing site impersonating the legitimate Bityard cryptocurrency exchange. Analysis indicates it targets users attempting to access trading platforms, likely harvesting login credentials, API keys, or depositing funds into attacker-controlled wallets. The site uses a cloned interface and branding to appear authentic, a common tactic in crypto-related phishing campaigns. Infrastructure analysis reveals the domain was registered on October 28, 2025, through Name SRS AB, a registrar frequently associated with newly created phishing domains. It currently resolves to IP address 192.238.187.180 and holds a Let's Encrypt SSL certificate, which provides HTTPS encryption but offers no legitimacy. Despite its active status and presence in one AlienVault OTX threat intelligence pulse, VirusTotal reports 0 detections out of 95 engines, suggesting the threat is either new or evading detection through obfuscation techniques. Users who visited bityardx.com should immediately revoke any active sessions and change passwords for linked accounts, particularly crypto wallets or exchange logins. Check browser extensions for unauthorized modifications and scan devices for malware. If funds were transferred, report the incident to local cybercrime authorities and the legitimate Bityard platform. Monitor financial statements for unauthorized transactions and consider freezing credit if personal data was entered. Bookmark verified exchange URLs and enable multi-factor authentication to prevent future compromise.