gengamb[.]cc

gengamb.cc, a phishing domain, is now offline but was previously flagged by 14 out of 91 VirusTotal vendors as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP managed by Cloudflare, Inc. in the United States. It was first detected by PhishDestroy in June 2026, indicating its active use in phishing activities prior to being taken down.

The domain's SSL certificate was issued by Let's Encrypt, a common choice for phishing operations due to its free and automated nature. This domain was primarily used for phishing, exploiting users by imitating legitimate services or brands to harvest sensitive information. Despite its takedown, the domain's initial activity highlights the persistent threat such domains pose, especially when they are newly registered and not yet widely detected.

Phishing domains like gengamb.cc often exploit the time gap between their registration and the propagation of detection data across antivirus databases. PhishDestroy's early detection capabilities help identify these threats during this critical window, even when they are not yet flagged by many security vendors. The domain's presence on a public blocklist and its high platform risk score of 73/100 underscore its malicious intent and the importance of proactive threat detection.