tagomiait[.]com

The domain tagomiait.com was registered on October 09, 2025 through Gname.com Pte. Ltd. and currently resolves to the Cloudflare‑owned address 188.114.97.3, which is geolocated in Canada. Authoritative name servers coby.ns.cloudflare.com and dora.ns.cloudflare.com indicate that the domain is using Cloudflare DNS and likely benefits from the provider’s CDN and protection services. The domain appears on three independent security blocklists and is actively listed by PhishDestroy, MetaMask, and SEAL, confirming that threat‑intelligence feeds have observed malicious use. VirusTotal analysis shows that three of ninety‑one scanned security vendors flagged the domain, providing additional corroboration of its hostile nature.

The risk rating assigned by the reporting system is high, and the status remains active as of the report date, July 28, 2026. Available evidence does not include a public page title, SSL certificate details, or HTTP response codes, so the exact content served by the site cannot be verified at this time. Likewise, no attribution to a specific phishing kit or targeted brand has been disclosed, limiting the ability to map the campaign to a broader threat actor profile. The presence of Cloudflare as the hosting provider does not inherently mitigate the threat, as the service is frequently abused to conceal malicious infrastructure.

Defenders should block traffic to tagomiait.com at the network perimeter and add the associated IP address 188.114.97.3 to deny lists. Endpoint security solutions should incorporate the domain and its IP into reputation feeds, and security operations centers should monitor the three blocklists for any updates. Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture changes in vendor detections.