# tsotchkemigrate.xyz — SUSPICIOUS

> tsotchkemigrate.xyz is an IRS impersonation scam site flagged by 1 of 95 VirusTotal vendors. Users targeted with fake tax migration emails risk credential.

## Summary
PhishDestroy identifies tsotchkemigrate.xyz as an active IRS impersonation scam targeting users with fake tax migration alerts. 

This domain was flagged by 1 of 95 VirusTotal security vendors, registered through OwnRegistrar, Inc. on March 20, 2026, resolving to IP 188.114.97.3. The Let's Encrypt SSL certificate lends false legitimacy to the scam infrastructure.

If you visited tsotchkemigrate.xyz, do not enter any personal or financial data. Revoke any submitted credentials immediately, scan your device for malware with a reputable antivirus tool, and report the domain to your local cybercrime unit or the FTC.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-20 21:49:57
- Registrar: OwnRegistrar, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/39c7ae81-b844-4222-be2b-cc142d48a7f1
- PhishDestroy: https://phishdestroy.io/domain/tsotchkemigrate.xyz/
- LLM endpoint: https://phishdestroy.io/domain/tsotchkemigrate.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tsotchkemigrate.xyz/
Last updated: 2026-03-20