bybit-tradefunds[.]com

The domain bybit-tradefunds.com was registered through HOSTINGER operations, UAB on November 07, 2023 and currently resolves to the IPv4 address 195.35.39.238. The authoritative name servers listed for the zone are ns1.dns-parking.com and ns2.dns-parking.com, indicating a typical parking configuration. VirusTotal analysis shows that 11 of 91 scanned security vendors have flagged the domain, suggesting a moderate level of consensus among detection engines that the site is malicious. The domain appears on a single external security blocklist and has been specifically blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing‑related activity. Its status remains active as of the report date, July 27, 2026, and no evidence of takedown or remediation has been observed.

Available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any explicit reference to a targeted brand. Consequently, the precise nature of the impersonation, if any, cannot be confirmed at this time. The lack of publicly visible content limits attribution of the phishing kit or payload, and the only observable indicators are infrastructure‑level artifacts such as registration data, name server configuration, and the hosting IP address.

Defenders should prioritize adding the IP address 195.35.39.238 to network‑level deny lists and enforce domain‑based blocking for bybit-tradefunds.com across perimeter and endpoint controls. Continuous monitoring of DNS query logs for the domain and its name servers can provide early warning of potential outreach campaigns. Where possible, threat‑intel platforms should be queried for any emerging indicators of compromise linked to the hosting provider or the observed IP range.