tk-merchant.com

Critical Risk

Critical Risk
Phishing / Credential Theft

At a glance

Antivirus · registration · identity
Antivirus detections
15 flagged
14 malicious · 1 suspicious
alphaMountain.ai
Domain registration
Jun 21, 2026Registered
28 days oldAt scan time
Operator identity
Missing
No independently verifiable operator identity
Verified factsSaved with this scan
  1. 14 engines classified the URL as malicious and 1 as suspicious; 47 returned harmless, 31 returned undetected, and 0 returned no usable result.
  2. Google Safe Browsing returned 1 listed threat category for this address.
  3. Operator identity: Missing. No independently verifiable operator identity
  4. The domain was registered Jun 21, 2026 and was 28 days old at scan time.
  5. The isolated page observation recorded 2 requests and did not mark the page as malicious.

Web Research

Independent public research was unavailable for this scan.

Threat Detection

Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.

Antivirus distribution
Recorded engine classifications, not a blanket clean bill
93 engines
Malicious14
Suspicious1
Harmless47
Undetected31
No result0
Antivirus consensus

Antivirus engine results

Result date Jul 19, 2026
Detection matrix
15 engines flagged this URL

This scan saved classifications from an antivirus network of 92 engines. 14 named engine results are available below; the saved summary records 15 malicious or suspicious classifications in total.

14Malicious1Suspicious47Harmless31Undetected0No result92Engines
0
of 92
alphaMountain.ai
Malicious· phishing
BitDefender
Malicious· phishing
CRDF
Malicious· malicious
CyRadar
Malicious· phishing
Forcepoint ThreatSeeker
Malicious· phishing
Fortinet
Malicious· phishing
G-Data
Malicious· phishing
Google Safe Browsing
Malicious· phishing
Kaspersky
Malicious· phishing
Lionic
Malicious· phishing
Rising
Malicious· phishing
Sophos
Malicious· malware
VIPRE
Malicious· phishing
Gridinsoft
Suspicious· suspicious

15 antivirus engines flagged this URL. A single classification is not consensus by itself. Review its label together with the page, identity, behavior, and history evidence shown in this report.

Threat pattern
Phishing / Credential Theft
Threat tags
phishing
Scam-Type Likelihood

1 of 21 categories showed signals

This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.

Top match: Phishing / Credential Theft
Phishing / Credential Theft
High likelihood
90/100
  • Google Safe Browsing flagged this as social engineering / phishing.
  • AI analyst tagged this as phishing / data-harvesting.

Technical Details

Identity, domain, infrastructure, and connection facts saved with this scan.

July 20, 2026 at 3:30 AM UTC

Identity

6 facts
Operator
Missing
On-domain email
Unavailable
Other email
Unavailable
Phone
Unavailable
Postal address
Unavailable
Social profiles
Unavailable

Domain

8 facts
Domain age
28 days old
Registered
Jun 21, 2026
Registrar
NameCheap, Inc.
Expires
Jun 21, 2027
WHOIS updated
Jun 21, 2026
Registrant
Unavailable
Registration country
Unavailable
WHOIS privacy
Not observed

Infrastructure

14 facts
HTTPS
Valid certificate
TLS protocol
TLSv1.3
Certificate issuer
ns1.bingxpro.com
Certificate subject
ns1.bingxpro.com
Certificate valid from
Jan 22, 2026
Certificate valid to
Jan 22, 2027
Network address
157.245.204.152
ASN
AS14061
Hosting organization
DIGITALOCEAN-ASN - DigitalOcean, LLC, US
Country
SG
Server
Unavailable
Site platform
Unavailable
IP reputation
0% confidence · 1 reports
Tor exit node
No

Connections

13 facts
Scan scope
Domain
Destination host
tk-merchant.com
Redirects
0
Cross-domain redirect
No
Redirect status codes
301
Lookalike characters
Not observed
Internationalized domain
No
Page response
Unavailable
Observation coverage
Complete
Extracted links
2
Unique IPs contacted
0
Countries contacted
1
Referenced domains
Unavailable

What to do

1
Before interacting
Do not sign in
2
If you already interacted

If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.

Final Verdict

Do not sign in

Key evidence

  1. 114 engines classified the URL as malicious and 1 as suspicious; 47 returned harmless, 31 returned undetected, and 0 returned no usable result.
  2. 2Google Safe Browsing returned 1 listed threat category for this address.
  3. 3Operator identity: Missing. No independently verifiable operator identity
Evidence: strongScope: DomainFresh scan: July 20, 2026 at 3:30 AM UTC

Safety FAQ

What should I do about tk-merchant.com?+

Do not sign in.

How old is tk-merchant.com?+

tk-merchant.com is 28 days old and was registered jun 21, 2026.

What if I already interacted with tk-merchant.com?+

If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.

When was this report updated?+

This report reflects the scan completed July 20, 2026 at 3:30 AM UTC.