# tetherwiki.net — SUSPICIOUS

> Beware: tetherwiki.net hosts a crypto drainer impersonating Tether Wiki. Reported to PhishDestroy after 0/95 VirusTotal scans missed it.

## Summary
PhishDestroy identifies tetherwiki.net as a live phishing site that lures cryptocurrency users with a counterfeit Tether Wiki portal designed to steal tokens. The domain presents itself as an authoritative source for USDT information while embedding a malicious wallet-draining script that automatically transfers tokens from victim wallets upon interaction. Threat actors registered the domain through IONOS SE on April 06, 2026, and equipped it with a Google Trust Services SSL certificate to appear legitimate, resolving to IP address 216.24.57.1. Initial VirusTotal analysis returned zero detections out of 95 engines, and no public blocklists currently flag the domain, allowing the campaign to operate undetected.  This domain was flagged by PhishDestroy during routine DNS monitoring and exhibits clear hallmarks of a crypto drainer campaign: a newly minted domain with a crypto-related keyword, valid SSL, and a clean reputation score. The registration timing aligns with recent Tether scam trends targeting users searching for “Tether Wiki” or USDT documentation. Security teams should block 216.24.57.1 at the firewall and monitor DNS resolution for tetherwiki.net across their networks. Given the lack of third-party detection, proactive blocking is essential to prevent wallet compromise.  If you visited tetherwiki.net or entered wallet credentials, immediately revoke any connected permissions using your wallet’s security settings and transfer remaining assets to a clean wallet. Scan your device with updated antivirus software and consider using a hardware wallet for sensitive transactions. Report the incident to PhishDestroy with your transaction hashes and wallet addresses to aid in takedown efforts and protect others from this drainer.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-06 21:27:05
- Registrar: IONOS SE
- IP: 216.24.57.1

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/tetherwiki.net
- PhishDestroy: https://phishdestroy.io/domain/tetherwiki.net/
- LLM endpoint: https://phishdestroy.io/domain/tetherwiki.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tetherwiki.net/
Last updated: 2026-04-07