tethergoldbar[.]com

tethergoldbar.com entered the PhishDestroy evidence set on Jun 25, 2026. The stored content classification is crypto scam. The assembled evidence scores 86/100 (high).

Two independent sources are positive: VirusTotal and Spamhaus DBL. VirusTotal recorded 7 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, PhishFort, SOCRadar on Jul 26, 2026 at 02:34 UTC. Spamhaus DBL: DBL_PHISH on Jul 25, 2026 at 10:30 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLQuery recorded no positive detection on Jun 25, 2026 at 00:33 UTC. Google Safe Browsing returned no flag on Jun 25, 2026 at 00:30 UTC. URLScan completed without a malicious verdict (score 0) on Jun 27, 2026 at 08:14 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:27 UTC. Registration records for the domain list GoDaddy.com, LLC as the registrar and Jun 20, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 160.153.180.21 on AS398101 (GO-DADDY-COM-LLC - GoDaddy.com, LLC, US). The associated network metadata labels the endpoint as AS398101 GoDaddy.com, LLC in Phoenix, US. The stored server header is Microsoft-IIS/10.0. Captured page title: “Tether Gold Bar | Premium Digital Gold Investment Platform”. DOM analysis completed on Jun 25, 2026 at 02:20 UTC; stored DOM score 78/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 01:58 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Sep 18, 2026; checked Jun 25, 2026 at 07:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as crypto scam.