tkzhoph[.]com

tkzhoph.com is currently operating as a high-risk credential-theft site designed to trick visitors into surrendering login details or sensitive personal information. It mimics legitimate pages in a web-browser session, then quietly exfiltrates whatever data is entered. Any credentials submitted on this domain are immediately harvested by attackers and could be weaponized within hours for account takeover, financial fraud, or further social-engineering campaigns.

This domain was flagged by PhishDestroy after VirusTotal engines—including established AV vendors and specialized phishing feeds—recorded 8 positive detections out of 95 total scanners on 104.21.61.98. Historical DNS records confirm the domain was registered through Global Domain Group LLC on 20 September 2025 and remains resolvable and active at the time of this report. Despite a TLS certificate issued by Google Trust Services, the site’s sole purpose is deception, evidenced by the mismatch between its appearance and the backend infrastructure.

If you visited tkzhoph.com—even briefly—assume any credentials entered were compromised. Immediately rotate passwords on the affected account(s), enable multi-factor authentication wherever possible, and scan local devices for malware. Report the incident to your organization’s security team or, if this relates to personal accounts, contact the relevant service provider right away to initiate fraud alerts or account recovery procedures.