bybititoiu[.]com

PhishDestroy identifies bybititoiu.com as an active crypto drainer impersonating the Bybit brand. This domain was registered on May 05, 2026, through Dynadot Inc and resolves to IP 104.18.21.48. The site currently evades detection with 16/95 VirusTotal detections and utilizes a Let's Encrypt SSL certificate to appear legitimate. Evidence confirms this domain is a high-risk brand impersonation campaign. The domain’s recent creation date (May 05, 2026) and lack of blocklist detections suggest it is newly deployed and actively targeting users. Registrar Dynadot Inc and IP 104.18.21.48 are associated with this campaign, which mimics Bybit’s branding to deceive visitors. The absence of VirusTotal detections (16/95) indicates this threat is not yet widely recognized by security tools, increasing the risk of successful exploitation. If you visited bybititoiu.com, cease all interaction with the site immediately. Do not enter any credentials, wallet addresses, or personal information. Clear your browser cache and disable any active sessions. Report the domain to Bybit’s abuse team and update your security software. Monitor your crypto wallets for unauthorized transactions and consider revoking any connected permissions.