tethergrow[.]cloud

PhishDestroy identifies tethergrow.cloud as a live crypto drainer domain actively luring victims under false pretenses, currently under investigation for malicious intent. This domain, tethergrow.cloud, is flagged by 2 of 95 VirusTotal vendors to date. It resolves to IP 147.93.101.15 and was registered through HOSTINGER operations, UAB on April 05, 2026. Notably, the domain holds a valid Let’s Encrypt SSL certificate, enhancing its perceived legitimacy while evading immediate detection. Additional telemetry reveals this domain remains unlisted on major threat intelligence blocklists and maintains high trust scores across several reputation engines, though its recent creation and low detection rate underscore a potentially emerging threat. The current status of tethergrow.cloud is active and evolving, with active infrastructure hosting a crypto drainer designed to siphon funds from unsuspecting users. Given its low initial detection footprint and active SSL certificate, the risk of exposure to end users remains elevated. Immediate action is advised: block the domain and IP 147.93.101.15 at the network perimeter, alert users to avoid interactions with tethergrow.cloud, and verify any recently visited URLs using PhishDestroy to confirm safety. Continuous monitoring of this domain is recommended due to its high-risk potential and rapidly changing threat profile.