tangemmainet[.]pages[.]dev

The domain tangemmainet.pages.dev was a generic phishing site designed to steal user credentials through credential phishing tactics. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, tangemmainet.pages.dev has been taken offline, though it previously posed an elevated risk to visitors.

Technical indicators confirm the domain's malicious intent. tangemmainet.pages.dev was flagged by 1 of 95 VirusTotal security vendors, including Trustwave, and appeared on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on August 05, 2025, the domain resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100. The HTTP status returned was 403, and nameservers were bjorn.ns.cloudflare.com and norah.ns.cloudflare.com.

Users who interacted with tangemmainet.pages.dev should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or platforms. To report the domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If credentials were shared, assume they are compromised and avoid reusing them across other services.