tether-rgold[.]com

Analysis of tether-rgold.com shows a newly registered domain (creation date 24 Oct 2025) hosted by Namecheap Inc. The domain remains active and resolves to the IPv4 address 82.25.96.136. DNS resolution is delegated to ns1.dns-parking.com and ns2.dns-parking.com, a pair of parking‑service nameservers commonly used for disposable or malicious infrastructure. VirusTotal reports that two of ninety‑one scanning engines have flagged the domain, indicating that at least a small subset of security products have identified malicious behavior associated with this host.

The domain is currently listed on one external security blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing the assessment that it is being used for phishing‑related activity. No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page‑title metadata is available at this time, leaving the exact content and targeted brand of the phishing campaign unverified. Defenders should treat tether-rgold.com as high‑risk infrastructure: network perimeter controls ought to deny outbound connections to the IP 82.25.96.136, DNS filtering should block resolution of the domain, and endpoint security solutions should incorporate the two VirusTotal detections into their block lists.

Continuous monitoring of DNS query logs for the domain and its associated nameservers is recommended to detect any internal attempts to resolve or contact the host. Because the domain is newly minted and its payload is not yet publicly dissected, threat‑hunting teams should prioritize correlation of any credential‑submission events or login‑page redirects with this indicator to uncover potential victimization patterns.