bybit-qr[.]com[.]cn

The domain bybit-qr.com.cn has been identified as a brand impersonation threat specifically targeting the cryptocurrency trading platform Bybit. The site was designed to mislead users by mimicking the official Bybit website, potentially aiming to steal sensitive information or funds from unsuspecting users. This kind of brand impersonation can result in significant financial loss and privacy breaches for victims who fall into the trap.

Concrete evidence of this threat is supported by data from several security sources. According to VirusTotal, 7 out of 95 security vendors have flagged this domain as malicious. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on April 07, 2026. It has also been listed on at least one security blocklist, further indicating its malicious intent. The domain resolves to IP address 154.216.110.110 and has been given a trust score of 0/100 by Gridinsoft, emphasizing its lack of credibility and potential danger.

Users who have visited bybit-qr.com.cn should immediately take steps to secure their accounts and personal information. This includes changing passwords on any potentially affected accounts and closely monitoring financial transactions for unusual activity. It is also advisable to run a comprehensive security scan on their devices to ensure no malware has been installed. Additionally, users should report any suspicious activity to the relevant authorities to help mitigate the spread of this threat.