# www.tetherfly.com — SUSPICIOUS

> PhishDestroy identifies tetherfly.com as a crypto drainer site with 0/95 VirusTotal detections. Avoid visiting or connecting wallets.

## Summary
PhishDestroy identifies tetherfly.com as a newly registered crypto drainer site designed to trick cryptocurrency users into approving malicious wallet transactions. The domain was flagged on March 16, 2026, just days after creation, and is already hosting deceptive content mimicking legitimate crypto platforms. Security tools have not yet flagged this domain due to its recent emergence, making it a high-risk vector for unsuspecting users.  This domain was flagged with 0 detections out of 95 VirusTotal scans, registered through GoDaddy.com, LLC, and resolves to IP address 65.21.240.167. Its SSL certificate is issued by Let's Encrypt, a common tactic to appear legitimate. The domain name itself incorporates 'tether,' a well-known stablecoin, suggesting a deliberate attempt to impersonate trusted crypto infrastructure. Despite its clean initial scan, the site’s recent registration and suspicious naming pattern indicate active development for phishing campaigns.  If you have visited tetherfly.com or interacted with its pages, do not connect any cryptocurrency wallets or approve any transaction requests. Disconnect from the site immediately and check your wallet for unauthorized transactions or approvals. Use a hardware wallet or revoke any suspicious token approvals via reputable tools like revoke.cash. Report the domain and any wallet interactions to PhishDestroy or your local cybercrime unit to help track this threat. Avoid reusing seed phrases or private keys across platforms, and consider transferring remaining funds to a new, secure wallet if exposure occurred.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-16 06:56:12
- Registrar: GoDaddy.com, LLC
- IP: 65.21.240.167

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/78b3accf-37e7-413c-b2e0-5f92fb2fc499
- PhishDestroy: https://phishdestroy.io/domain/www.tetherfly.com/
- LLM endpoint: https://phishdestroy.io/domain/www.tetherfly.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.tetherfly.com/
Last updated: 2026-03-22