bybit-yz[.]com[.]cn

This domain, bybit-yz.com.cn, is a fraudulent website designed to impersonate the legitimate Bybit cryptocurrency exchange. It poses a serious threat to users by attempting to steal their login credentials and potentially drain their crypto wallets. The site's title, "Bybit官网_Bybit交易所_Bybit下载_合约交易平台入口," is a direct copy of Bybit's official branding, tricking visitors into thinking they are on the real platform. In reality, any information entered on this site is captured by scammers, leading to financial loss.

PhishDestroy's investigation reveals several technical indicators that confirm the malicious nature of this domain. VirusTotal shows that 2 out of 95 security vendors flagged this domain as malicious, providing a consensus from the cybersecurity community. The domain was created on April 07, 2026, which is very recent, a common tactic used by fraudsters to avoid detection. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on IP address 154.216.110.107. The SSL certificate is issued by Let's Encrypt R12, which is free and easily obtained, giving the site a false sense of legitimacy. Additionally, the domain appears on one security blocklist, further indicating its harmful intent.

If you have visited bybit-yz.com.cn, it is crucial to take immediate action. Do not enter any personal information, passwords, or wallet credentials. If you have already done so, change your Bybit password and enable two-factor authentication (2FA) immediately. Monitor your accounts for any unauthorized activity and report any suspicious transactions to your financial institution. Always verify the authenticity of any cryptocurrency exchange by using trusted sources like PhishDestroy, which maintains an updated list of known fraudulent domains. Stay safe by double-checking URLs before entering sensitive information and by using security tools that block known phishing sites.