shop-tangem[.]com

Analysis indicates that the domain www.shop-tangem.com was registered on February 21 2026 and is currently taken offline. The domain resolves to the IP address 193.24.123.124, which is assigned to AS200593 PROSPERO OOO in Russia. Cloudflare name servers adele.ns.cloudflare.com and george.ns.cloudflare.com are listed, suggesting the use of Cloudflare’s DNS service. No SSL certificate is observed for the host, meaning HTTPS connections are not available. The domain has been blocked by the PhishDestroy service and appears on a single public blocklist, confirming that security operators have identified it as malicious.

Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, indicating a high likelihood of abuse. VirusTotal reports that 12 of 93 scanning engines flag the domain, providing independent corroboration of its malicious nature. The threat type is classified as generic phishing, and the domain is associated with a generic phishing campaign rather than a targeted brand impersonation. Evidence does not reveal a specific page title, brand target, or kit, so the exact content of the site remains unknown.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host, and add the IP address to deny lists. Because the infrastructure is hosted behind Cloudflare, any future re‑hosting could obscure the origin, so threat‑intel feeds should be consulted for updates. Organizations that use email filters or web‑proxy solutions should ensure that signatures for www.shop-tangem.com are present, and incident response teams should treat any communications referencing this domain as malicious. The current offline status does not guarantee that the actors will not reactivate the site, so continuous vigilance is advised.