bybitproka[.]com

This domain, bybitproka.com, was registered on 2026-04-07 through TuringSign Inc. d/b/a Cosmotown. It resolves to the Cloudflare‑hosted address 188.114.96.3 located in Canada and uses the authoritative nameservers andy.ns.cloudflare.com and meera.ns.cloudflare.com. The site presents the page title “Just a moment…” and returns HTTP 403, indicating a Cloudflare challenge page rather than a visible login interface. The SSL certificate is issued by Google Trust Services under the WE1 identifier, confirming the use of legitimate TLS infrastructure. Threat intelligence flags the domain as a high‑risk brand‑impersonation campaign targeting Bybit, classified as a fake exchange. AlienVault OTX cites the domain in one pulse, Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports four detections out of 94 scanners. The domain appears on one security blocklist and is already blocked by PhishDestroy. Current evidence does not reveal additional command‑and‑control servers, payloads, or credential‑harvesting pages. Defenders should immediately block DNS resolution to bybitproka.com, add the address 188.114.96.3 to network‑level deny lists, and monitor for any outbound connections to Cloudflare‑served IP ranges associated with this domain. Continuous threat‑intel feeds should be consulted for updates, and any observed traffic should be logged for forensic correlation.