tk-globmall[.]top

Analysis of tk-globmall.top indicates that the domain is actively engaged in a generic phishing campaign. The site has been blocked by the PhishDestroy network, demonstrating that at least one dedicated anti‑phishing service has identified malicious activity associated with the domain. VirusTotal reports that 17 of 91 security vendors have flagged tk-globmall.top, providing multi‑engine corroboration of its malicious intent.

Additionally, the domain appears on a single security blocklist, confirming that external threat‑intelligence feeds have recognized it as a risk. No further infrastructure details such as registrar information, IP address, hosting provider, ASN, or SSL certificate data are available in the current intelligence set, leaving the underlying hosting environment and network location uncertain. The lack of public page‑title or brand targeting data means that the specific content and lure technique employed by the site have not been disclosed.

Defenders should continue to block tk-globmall.top at perimeter and endpoint controls, monitor DNS queries for the domain, and incorporate the observed vendor detections into their threat‑intel feeds. Ongoing surveillance of the domain’s activity and periodic re‑scanning with VirusTotal or similar aggregators are recommended to capture any changes in detection rates or additional malicious payloads. Organizations that employ web‑filtering solutions should ensure the domain is listed in their deny lists to mitigate credential‑stealing attempts targeting users.