bytebayke[.]co[.]ke

The domain bytebayke.co.ke is a confirmed phishing site engaged in brand impersonation targeting Amazon users. It presents itself as an ecommerce platform to deceive victims into entering login credentials or personal information, posing an elevated risk of financial fraud or identity theft. No crypto drainer kit was detected, but the site was actively impersonating Amazon before being taken offline.

Technical analysis shows bytebayke.co.ke was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0/100. The domain was registered on February 22, 2025, through HOSTAFRICA EAC and resolved to the IP address 102.209.117.38, hosted by AS329184 Host Africa (Pty) Ltd in South Africa. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Let's Encrypt (E8). The observed page title was 'Home - Bytebayke', and the site employed technologies such as Bootstrap, Nginx, and jsDelivr. At the time of assessment, the domain returned an HTTP 500 status, indicating it was no longer operational.

Individuals who interacted with bytebayke.co.ke should immediately change any passwords entered on the site, particularly for Amazon accounts, and enable two-factor authentication (2FA) where available. Monitor financial statements and credit reports for unauthorized activity. Report the phishing domain to Amazon's official abuse channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.