tigamb[.]cc

PhishDestroy identifies tigamb.cc as an active generic phishing domain observed in early 2026. The domain, registered on March 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, appears to leverage domainsquatting patterns without targeting a specific brand. Security telemetry suggests the use of a generic drainer kit designed to harvest user credentials via spoofed login portals. Initial assessments indicate low sophistication, relying on recent registration and Let’s Encrypt certificates to establish superficial legitimacy.

Technical indicators for tigamb.cc are as follows: VirusTotal currently shows 0 detections out of 95 engines, indicating undetected malicious activity as of seed 026561. The domain resolves to 172.67.178.30 and is registered with NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain was created on March 22, 2026, and secured via Let’s Encrypt certificate authority. As of the latest scan, it remains unlisted on Google Safe Browsing and has not appeared on major threat intelligence blocklists.

At present, tigamb.cc is flagged as under_investigation with an active status. The low detection rate warrants heightened monitoring due to the potential for rapid escalation as threat actors refine infrastructure. No confirmed phishing campaign attribution or victim reports have been validated to date. Users and organizations are advised to avoid interaction and implement network or DNS-level blocking of 172.67.178.30 and the domain itself. Remaining risk is assessed as medium pending further intelligence updates, emphasizing the importance of proactive threat hunting and user awareness to counter emerging phishing vectors.