tk1971-com[.]net

The domain tk1971-com.net has been identified as a high‑risk phishing infrastructure. As of July 12 2026 the site returns HTTP 200 and presents the page title “TK1971 — Official Gaming Platform in Bangladesh | TK1971”, indicating an attempt to masquerade as a regional gaming service. The domain was registered on September 29 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently serviced by Cloudflare’s network (nameservers dolly.ns.cloudflare.com and nick.ns.cloudflare.com). DNS resolution points to IP 104.21.23.251, which belongs to AS13335 Cloudflare, Inc., and the site is delivered over HTTP/3 using a Google Trust Services / WE1 SSL certificate. Threat intelligence scores reinforce the malicious classification: Gridinsoft assigns a trust score of 0 / 100, PhishDestroy has already blocked the domain, and VirusTotal reports nine out of ninety‑five scanners flagging the host as malicious. The domain appears on one external blocklist and the overall risk level is marked high. While the exact phishing payload has not been captured, the combination of a legitimate‑looking title, active HTTPS, and multiple independent detections strongly suggests a credential‑ harvesting campaign targeting users of the purported gaming platform. Defenders should proactively deny any outbound connections to tk1971-com.net and its resolved IP address, add the domain and IP to DNS and firewall block lists, and monitor network logs for attempted accesses. Incident response teams should also scan internal endpoints for artifacts associated with the nine VirusTotal detections and consider user awareness messaging that references the “TK1971” branding to reduce the likelihood of credential submission. Continuous re‑evaluation is advised, as the infrastructure remains active and may evolve.