tcfgo.com
Classification: Malicious
tcfgo.com is a malicious hostname. Linked to Emotet malware. Reported by Telefonica CO SOC, last seen 2022-03-03. Resolves to 185.212.70.252 and 4 more.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:40:11.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Emotet | Telefonica CO SOC | 2022-03-03 16:17:12 | 2022-03-03 16:17:12 | malicious-activity | S0367 Emotet |
Tags
emotet banker compromised payload deliveryIP addresses resolved by this hostname
- 185.212.70.252 (2022-03-03 16:17:12)
- 2606:4700:3108::ac42:283a (2026-11-07 04:40:11)
- 2606:4700:3108::ac42:2bc6 (2026-11-07 04:40:11)
- 172.66.40.58 (2026-11-07 04:40:11)
- 172.66.43.198 (2026-11-07 04:40:11)
Whois information
- Domain
- tcfgo.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- CLOE.NS.CLOUDFLARE.COM, HASSLO.NS.CLOUDFLARE.COM, cloe.ns.cloudflare.com, hasslo.ns.cloudflare.com
- Registrant
- Cloudflare, Inc.
- Address
- DATA REDACTED
- City
- DATA REDACTED
- State
- Ankara
- Country
- TR — Türkiye 🇹🇷
- Contact email
- [email protected]
- Domain created
- 2025-03-13 08:29:12
- Domain expires
- 2027-03-13 08:29:12
- First indexed
- 2022-03-03 16:17:12
- Last updated
- 2026-11-07 04:40:11