tf-soc[.]com

This domain, tf-soc.com, is under investigation for generic phishing activity. The domain's page title 'Coming Soon' is a common placeholder used by threat actors to host fraudulent login pages or credential harvesting forms after initial setup. The domain's recent creation date and lack of legitimate content suggest it may be prepared for use in targeted phishing campaigns, potentially impersonating brands or services to steal user credentials or deploy crypto drainers.

Technical analysis reveals several indicators. VirusTotal shows 0 out of 95 security vendors have flagged this domain, meaning it has not been widely detected yet, which is typical for newly deployed phishing infrastructure. The domain was registered on October 29, 2025, through Porkbun LLC, a registrar sometimes used for bulk or low-scrutiny registrations. It resolves to IP address 213.232.236.204. One security blocklist has already identified this domain, indicating early-stage threat recognition. The domain remains active and is currently blocked by PhishDestroy, a community-driven blocklist.

Users who have visited tf-soc.com should immediately change passwords for any accounts entered on the site and enable multi-factor authentication. Run a full antivirus scan on the device used to access the domain. Monitor financial accounts for unauthorized transactions and report any suspicious activity to relevant authorities. Avoid revisiting the domain or interacting with any content hosted there.