tgramzok[.]top

The domain www.tgramzok.top was set up to steal people's login credentials. It impersonated a legitimate service to trick visitors into entering sensitive information, like usernames and passwords. This kind of attack is known as credential theft phishing, and it can lead to account takeovers and data breaches. The site has since been taken offline, but the threat remains for anyone who may have visited it.

PhishDestroy has confirmed this threat through multiple sources. VirusTotal shows that 16 out of 95 security vendors flagged this domain as malicious, which is a strong indicator of its dangerous nature. The domain was created on March 28, 2026, and registered through Gname.com Pte. Ltd. It resolved to the IP address 143.92.60.213 and used an SSL certificate from TrustAsia Technologies, Inc. (LiteSSL RSA CA 2025). This certificate was likely obtained to make the site appear legitimate to visitors. The domain appears on at least one security blocklist, further confirming its malicious purpose.

If you visited www.tgramzok.top, you should immediately change any passwords you may have entered on that site, especially if you reuse passwords across different services. Enable two-factor authentication on your accounts to add an extra layer of security. Monitor your accounts for any unusual activity and report any unauthorized access to the respective service providers. It is also a good idea to run a security scan on your devices to check for any malware that might have been downloaded. Staying vigilant and using unique, strong passwords is your best defense against such phishing attempts.