# tk-bclub.com — SUSPICIOUS

> tk-bclub.com is a crypto-drainer phishing site detected by 1 out of 95 VirusTotal engines. Verify any links before clicking on PhishDestroy.

## Summary
PhishDestroy identifies tk-bclub.com as an active crypto-drainer phishing domain designed to steal cryptocurrency from unwary users. The site mimics legitimate crypto platforms, prompting victims to connect their wallets and approve malicious transactions that drain funds. Victims typically land on tk-bclub.com through phishing links in social media, messaging apps, or fake ads, where the promise of free tokens or exclusive access overrides caution. Once connected, the site requests wallet approvals that authorize silent transfers to attacker-controlled addresses. This domain poses an elevated risk due to its recent creation and operational setup aimed at exploiting crypto users during high-activity periods.  This domain was flagged by VirusTotal with a detection rate of 1 out of 95 security vendors, indicating low detection but high risk due to its specificity. It was registered on August 19, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with disposable or short-lived domains used in fraud campaigns. The domain resolves to IP address 176.123.0.199, a server linked to multiple crypto-related scams. Its SSL certificate, issued by Let's Encrypt, adds a false sense of legitimacy, making it harder for users to spot the deception. The combination of a recent registration date and low detection rate suggests this site is part of a coordinated phishing operation targeting crypto investors.  If you visited tk-bclub.com, disconnect your wallet immediately using your wallet’s emergency disconnect feature or by revoking permissions on a secure device. Do not approve any transactions or sign any messages you did not initiate. Scan your device with updated antivirus software and consider transferring remaining funds to a new wallet with a different seed phrase. Report the domain to PhishDestroy and warn others in your network. Always verify URLs manually and use bookmarks for trusted crypto platforms. Enable multi-factor authentication and use hardware wallets for high-value transactions to reduce exposure to such attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-19 17:30:42
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 176.123.0.199

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cf0c51c7-78f5-4994-a99c-409b47c10747
- PhishDestroy: https://phishdestroy.io/domain/tk-bclub.com/
- LLM endpoint: https://phishdestroy.io/domain/tk-bclub.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tk-bclub.com/
Last updated: 2026-03-22