tk-store005[.]top

Analysis indicates that tk-store005.top was registered on 21 February 2026 and is currently offline. The domain resolves to IP 134.122.162.12, which is allocated to AS64050 BGP Network Limited in Taiwan. The hosting IP has been associated with malicious activity in multiple threat feeds; AlienVault OTX lists the domain in twelve separate pulses, and it appears on at least one public security blocklist. The site was flagged by PhishDestroy and received a zero‑score rating from Gridinsoft and a 1/100 trust score from Scamadviser, indicating extreme lack of credibility.

The SSL certificate presented (R12) is a self‑signed or otherwise low‑trust certificate, consistent with typical phishing infrastructure. VirusTotal scans show that fourteen out of ninety‑three antivirus and URL‑reputation engines flagged the domain as malicious, reinforcing the suspicion of phishing use. The HTTP response returned a generic “404 Not Found” page title, suggesting the landing page has been removed or is intentionally hidden. No additional content, brand targeting, or phishing kit details have been publicly disclosed, leaving the exact payload or credential‑harvesting method unknown.

Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurrection of the host IP, and add the IP address to internal threat‑intel lists. Given the multiple independent detections and the low trust scores, organizations should treat any traffic to tk-store005.top as hostile and enforce strict outbound filtering. Ongoing observation of related indicators, such as new subdomains under the same registrar or changes to the SSL certificate, is recommended to capture potential re‑use of the infrastructure.