tango-v3[.]vercel[.]app

Analysis of the domain tango-v3.vercel.app indicates active brand impersonation targeting Ethereum users, classified as a high-risk crypto scam. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolves to IP 64.29.17.195 within AS16509 (Amazon.com, Inc.) in the United States. The page title, 'Buy, sell & trade Ethereum and other top tokens on Uniswap,' explicitly suggests an attempt to mimic a legitimate cryptocurrency exchange platform. Current infrastructure reveals the use of Vercel hosting and HSTS implementation, while the SSL certificate is issued by Google Trust Services (WR1). Detection metrics as of July 12, 2026, show the domain is flagged by three security blocklists and explicitly labeled for social engineering by Google Safe Browsing. Additional defensive tools have blocked the domain, with a Gridinsoft trust score of 0/100 reinforcing its malicious classification. VirusTotal reports 14 detections from 93 security vendors, further corroborating the threat assessment. The domain remains operational with an HTTP 200 status, indicating ongoing accessibility for potential victims. Defenders should prioritize blocking access to this domain at the network level, particularly in environments handling cryptocurrency transactions. Given the explicit targeting of Ethereum users and the domain's persistent activity, monitoring for related infrastructure (e.g., subdomains, associated IPs) is recommended to identify potential secondary threats. The exact content and functionality of the site remain unanalyzed, but the available indicators align with known crypto scam patterns.