qqgamb[.]cc

Analysis as of July 24, 2026 identifies qqgamb.cc as a recently registered infrastructure supporting a crypto‑gambling phishing campaign. The domain was created on March 22, 2026 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It employs a Let’s Encrypt TLS certificate, which does not provide any indication of malicious intent but confirms that HTTPS was enabled. The site is associated with the publicly known “Gambler Scam” phishing kit, and the campaign’s advertised scam type is crypto gambling.

VirusTotal scanned the domain and six of ninety‑four AV engines reported detections, confirming that at least a subset of security products recognize malicious activity. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing resource. The risk level has been assigned as elevated and the operational status is listed as offline, indicating that the hosting has been taken down or otherwise rendered inaccessible. Available telemetry does not disclose the hosting IP address, autonomous system number, or geographic location, and no Safe Browsing, OTX, or additional blocklist entries are reported.

Consequently, the full scope of the supporting infrastructure remains uncertain. Defenders should continue to block qqgamb.cc at network perimeter and DNS layers, incorporate the domain into threat‑intel feeds, and monitor for any re‑registration or resurrection of the site. Because the domain uses a legitimate certificate authority, reliance on certificate validation alone is insufficient; detection should be based on the observed kit, the reported VirusTotal detections, and the presence on PhishDestroy. Ongoing review of related indicators, such as newly observed domains registered by the same registrar or employing the Gambler Scam kit, is recommended to pre‑empt potential campaign refreshes.