tamtix[.]com

Analysis indicates that the domain tamtix.com was registered on 21 February 2026. The authoritative DNS resolves to the IPv6 address 2606:4700:3030::6815:4001, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presents the page title “TAMTIX | Open the world of luck and rewards!” and is classified as a social‑media phishing campaign. The SSL certificate presented is identified as “WE1,” suggesting a likely publicly‑trusted certificate issued through Cloudflare’s automated issuance process.

The domain appears on a single security blocklist, specifically PhishDestroy, indicating that at least one reputable anti‑phishing feed has flagged the host. VirusTotal records show that the domain was submitted for scanning and evaluated by 93 security vendors; none of the vendors reported a detection at the time of the scan. The current operational status is listed as offline, and the risk level is marked as “under investigation.” No additional intelligence such as known phishing kits, compromised credentials, or payload URLs has been released. Because the domain resolves to a cloud‑provider address, it can be rapidly re‑hosted or moved to a different IP, which complicates static IP blocking.

Defenders should therefore consider adding tamtix.com to domain‑based blocklists, monitor DNS queries for the IPv6 address, and continue to query threat‑intel feeds for any changes in detection status. Ongoing observation of the certificate’s expiration and renewal patterns may also reveal future activity. Until further evidence emerges, the prudent course is to treat the domain as malicious and restrict user access to it.