bybitprojm[.]com

The domain bybitprojm.com is currently active and was registered on April 07, 2026 through TuringSign Inc. d/b/a Cosmotown. It resolves to the Cloudflare‑owned IP address 104.21.86.109, which is hosted in the CA region and is served by the Cloudflare nameservers andy.ns.cloudflare.com and meera.ns.cloudflare.com. The site presents a TLS certificate issued by Google Trust Services under the WE1 trust store, indicating a legitimate‑looking HTTPS connection. An HTTP request returns a 403 status code and the page title is recorded as "Just a moment..."; no further content analysis is available. The infrastructure has been flagged on a single security blocklist, is listed in one AlienVault OTX pulse, and has been blocked by PhishDestroy. VirusTotal scans show that 3 of 94 security vendors have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. The site is classified as a fake exchange that impersonates the Bybit brand. Defenders should add bybitprojm.com to URL filtering and domain block lists, monitor DNS queries for the associated Cloudflare IP range, and enforce TLS inspection to detect the 403 response pattern. Because the page content beyond the title has not been publicly analyzed, additional sandbox or manual inspection is recommended to confirm any credential‑stealing payloads or redirects. Continuous threat‑intel correlation with the observed blocklist entries and OTX pulse is advised to track any emerging activity tied to this infrastructure.