tangandewamerah[.]store

A newly observed domain, tangandewamerah.store, has been flagged under active investigation for specific phishing activity targeting cryptocurrency users. Based on behavioral telemetry from sandbox analysis and heuristic scanning, this domain is suspected to be part of a crypto drainer campaign designed to divert assets from unwary users. The domain is currently in an active state and resolving to a known hosting provider, indicating it remains operational despite limited detection coverage. This domain resolves to IP address 188.114.96.3, which is hosted on Cloudflare’s infrastructure within ASN 13335. A valid SSL certificate issued by Let’s Encrypt (CN: tangandewamerah.store) was observed, suggesting an attempt to establish trust through encryption. Current VirusTotal analysis reveals 2 out of 95 detection engines flagged this domain as malicious at the time of assessment. The domain registration occurred recently, and no blocklist entries were detected during cross-referencing with multiple threat intelligence feeds. Trust scores from domain reputation engines show low or neutral ratings, consistent with newly created domains leveraged for short-lived campaigns. Given the high-risk nature of crypto drainer operations, immediate mitigation is required. Users should avoid interacting with any wallet-related links associated with this domain or similar unfamiliar domains. Organizations should implement DNS filtering rules to block resolution of tangandewamerah.store and monitor network traffic for connections to the associated IP. Blocking 188.114.96.3 at the firewall level and inspecting HTTPS traffic for signs of crypto wallet impersonation (e.g., wallet address substitution, clipboard hijacking) is strongly advised. Security teams should also consider adding this domain to blocklists and conducting a threat hunt for related IOCs such as other subdomains or registrant emails linked to this campaign. Due to the evolving nature of drainer toolkits, continuous monitoring and updating of detection rules are essential to prevent asset loss.