tco[.]sokgrm[.]online

The domain tco.sokgrm.online is a generic phishing site that does not impersonate a specific brand or deploy a known drainer kit. It was observed hosting a page titled 'GenFF 4 النسخة العربية' and posed an elevated risk of credential theft or malware distribution. As of the latest verification, tco.sokgrm.online has been taken offline.

Technical indicators show limited detection: 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft and Webroot, while Google Safe Browsing did not flag it. The domain appears on 1 security blocklist (PhishDestroy) and was created on February 21, 2026. It resolved to the IP address 98.84.224.111, hosted on Amazon.com, Inc. infrastructure (AS14618) in the US. The SSL certificate was issued by E6, and Gridinsoft assigned a trust score of 0/100.

Individuals who interacted with tco.sokgrm.online should change any passwords entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. If financial or cryptocurrency credentials were exposed, revoke token approvals and consider transferring funds to a new wallet. Report the domain to local cybersecurity authorities or platforms like PhishTank or Google Safe Browsing to aid in broader mitigation efforts.