shop-tangem[.]com
Evidence Summary
Analysis indicates that the domain www.shop-tangem.com was registered on February 21 2026 and is currently taken offline. The domain resolves to the IP address 193.24.123.124, which is assigned to AS200593 PROSPERO OOO in Russia. Cloudflare name servers adele.ns.cloudflare.com and george.ns.cloudflare.com are listed, suggesting the use of Cloudflare’s DNS service. No SSL certificate is observed for the host, meaning HTTPS connections are not available. The domain has been blocked by the PhishDestroy service and appears on a single public blocklist, confirming that security operators have identified it as malicious.
Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, indicating a high likelihood of abuse. VirusTotal reports that 12 of 93 scanning engines flag the domain, providing independent corroboration of its malicious nature. The threat type is classified as generic phishing, and the domain is associated with a generic phishing campaign rather than a targeted brand impersonation. Evidence does not reveal a specific page title, brand target, or kit, so the exact content of the site remains unknown.
Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host, and add the IP address to deny lists. Because the infrastructure is hosted behind Cloudflare, any future re‑hosting could obscure the origin, so threat‑intel feeds should be consulted for updates. Organizations that use email filters or web‑proxy solutions should ensure that signatures for www.shop-tangem.com are present, and incident response teams should treat any communications referencing this domain as malicious. The current offline status does not guarantee that the actors will not reactivate the site, so continuous vigilance is advised.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive