Phishing sites impersonating Tether

PhishDestroy has recorded 18 phishing domains impersonating Tether since 2025-10-17, 0 of them in the last 30 days. The most used registrars are SOLLUTIUM and GoDaddy.com; the most common TLDs are .com and .to. The official Tether domain is tether.to: any other site asking for your login or wallet is not Tether.

18
Domains, all time
0
Last 30 days
17
Online at last check
4
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 12026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 12026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 12026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 22026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Tether phishing domains detected per day: 7 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Tether site

Official domain: tether.to.

Words most often added to the brand in reported domains: usdt, mixer, usdtsecureanalyzer, tetherwallets, code, generator, usdtcasino, onlinecasinousdt, casino, anna.

  • Type the address yourself or use a bookmark; phishing links for Tether arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Tether will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Tether phishing domains

The 18 most recently detected domains impersonating Tether
DomainFirst detectedStatus at last checkRegistrar
usdtclaim.com2026-09-13OnlineDynadot
usdtreport.pro2026-09-13OfflinePublicDomainRegistry.com
snow-rat-590514.hostingersite.com2026-09-02OnlineHostinger
u-mixer-mix.com2026-08-27OnlineSOLLUTIUM
tetherusdtistanbul.com.websitedukkani.com.tr2026-08-10Online—
tether-stake.com2026-08-09OnlineGoDaddy.com
tetherairdrop.com2026-07-27OnlineDynadot
freeqr-codegenerator.com2026-06-10OnlineSOLLUTIUM
usdtqrcodegenerator.com2026-05-07OnlineSOLLUTIUM
usdt-casino.anna4redcar.org.uk2026-05-07Taken downNamecheap, t/a Spaceship
onlinecasinousdt.com2026-04-18OnlineInternet Domain Service BS
tether.ceo2026-04-18OnlineGname.com
usdt-qr.com2026-04-09OnlineSollutium EU sp. z o.o
usdtcasino.us2026-04-07OnlineSpaceship
usdt-qr-code-generator.to2025-12-01Taken downGovernment of Kingdom of Tonga
tetherwallets.com2025-10-27OnlineGoDaddy.com
usdtsecureanalyzer.com2025-10-21Taken downTrustname.com
usdt8mixer.com2025-10-17Taken downNiceNIC

All 18 Tether reports

Where they are registered and hosted

Top-level domains

  1. .com12
  2. .to1
  3. .us1
  4. .ceo1
  5. .uk1
  6. .tr1
  7. .pro1

Hosting networks

  1. Cloudflare, Inc.8
  2. CLOUDFLARENET, US3
  3. Namecheap, Inc.2
  4. DIGITALOCEAN-ASN, US1
  5. Tencent Building, Kejizhongyi Avenue1
  6. HostLAB Bilisim Teknolojileri A.S.1
  7. Hostinger International Limited1
  8. Amazon.com, Inc.1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Tether; share of all PhishDestroy reports: 0.01%.