app[.]dhykj[.]com

The domain app.dhykj.com was a generic phishing site designed to deceive users into disclosing sensitive information without impersonating a specific brand or employing a known drainer kit. As of the latest verification, app.dhykj.com has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity. Users searching whether app.dhykj.com is safe or a scam should treat it as malicious based on its operational history.

Technical analysis of app.dhykj.com revealed limited but notable detection: 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not issue a warning. The domain appeared on 1 security blocklist (PhishDestroy) and was assigned a Gridinsoft trust score of 0 out of 100. Registered on February 21, 2026, app.dhykj.com resolved to the IP address 188.114.97.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was 'HsahKey Bit'. The site returned an HTTP 429 status code prior to being taken offline.

Individuals who interacted with app.dhykj.com should immediately change any exposed credentials, particularly for financial or email accounts, and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report suspected fraud to relevant institutions. The domain can be reported to anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group to aid in broader threat mitigation efforts.