bym9n[.]mobi

The domain bym9n.mobi is identified as a brand impersonation threat specifically targeting Bybit, a major cryptocurrency exchange platform. Analysis confirms this domain was designed to deceive users by presenting itself as an official Bybit portal, likely for the purpose of credential harvesting or unauthorized fund transfers. The site is currently offline, but its prior activity poses significant risks to users who may have interacted with it during its operational period. Infrastructure analysis reveals concrete technical indicators of malicious intent. The domain was registered through FTL-HK (ASN: 141159) and resolved to the IP address 103.117.138.9, located in Hong Kong under AS141159, operated by Incomparable(HK)Network Co., Limited. Security vendors flagged this domain in 16 out of 95 VirusTotal scans, indicating a high probability of malicious activity. The page title, 'bybit官网入口-市场异常熔断保护机制,' directly references Bybit’s official branding and trading mechanisms, further confirming its intent to impersonate the legitimate platform. Additionally, the domain appears on two security blocklists and is explicitly blocked by PhishDestroy and PhishingDB. Notably, the absence of an SSL certificate is a critical red flag, as it exposes user data to interception during transmission. Current status indicates that bym9n.mobi has been taken offline, reducing immediate exposure risks. However, the domain’s prior activity and infrastructure warrant continued vigilance. Users who accessed this domain should immediately revoke any active sessions, reset credentials, and monitor accounts for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address (103.117.138.9) to prevent future access attempts. Given the elevated risk level, users are advised to verify the authenticity of any Bybit-related domains through official channels before engaging with them. Proactive monitoring of similar impersonation attempts is recommended to mitigate potential financial and data losses.