bybitosent[.]com

PhishDestroy identifies bybitosent.com as an active brand impersonation domain targeting Bybit users with crypto drainer tactics. The domain leverages Bybit’s brand recognition to deceive visitors into connecting crypto wallets or submitting login credentials under false pretenses. This represents a significant risk to cryptocurrency traders who may unknowingly expose private keys or seed phrases. This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating limited but present detection across commercial security stacks. It resolves to IP 104.18.20.48, hosted on infrastructure associated with known abuse patterns. Registered through Dynadot Inc., the domain was created on April 12, 2026, suggesting a newly established threat vector. The SSL certificate is issued by Google Trust Services, which is used to lend false legitimacy to the site. Despite the certificate, trust scores remain critically low due to active impersonation behavior. Users are advised to avoid interacting with bybitosent.com or any Bybit-branded domains not verified directly through official channels. All crypto platform interactions should occur only at the verified domain (bybit.com) or via official mobile applications. Enable wallet address verification and two-factor authentication on all exchanges. Report this domain to PhishDestroy and follow the platform’s blocking guidance to prevent further exposure. Do not enter credentials or connect wallets on this site.