tqam[.]cc

The domain tqam.cc is currently classified as a high‑risk generic phishing operation and remains active as of the report date, July 27, 2026. Registration data shows the domain was created on June 24, 2026 through Dynadot Inc, indicating a very short lifespan typical of malicious infrastructure. DNS resolution points to the IPv4 address 188.114.97.3 and the authoritative nameservers are hal.ns.cloudflare.com and venus.ns.cloudflare.com, both belonging to Cloudflare’s global network, which can provide anonymity and rapid re‑deployment for threat actors.

Threat intelligence indicates the domain is listed on a single security blocklist and has been blocked by the PhishDestroy service, reflecting that at least one external mitigation platform has taken action against it. VirusTotal analysis records five of ninety‑one security vendors flagging tqam.cc, demonstrating modest but notable detection across the scanning ecosystem. No additional evidence such as SSL certificates, HTTP response codes, or page titles is presently available, leaving the exact content of the site unverified.

Defenders should continue to monitor tqam.cc for changes in detection prevalence, consider adding the domain to internal blocklists, and enforce outbound traffic filtering to prevent user interaction. Given the recent creation date, active status, and existing detections, the domain should be treated as a confirmed phishing threat pending further investigation.