tethum[.]com

PhishDestroy confirms tethum.com as an active fake login portal designed to harvest user credentials. This domain mimics legitimate login interfaces to trick victims into surrendering usernames, passwords, or financial details. The page leverages social engineering tactics, often distributed via spoofed emails or malicious links, to lure users into entering sensitive information. Once captured, credentials may be sold on dark web markets or used for immediate financial fraud. The threat is elevated due to the domain’s recent registration and low detection rates, enabling prolonged operation before blocking. This domain was flagged with a VirusTotal detection rate of 1/95 security vendors, indicating minimal automated coverage. It is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to IP 172.67.222.167. The domain tethum.com was created on February 25, 2026, highlighting its recent emergence as a phishing asset. Its SSL certificate from Let’s Encrypt further enhances its legitimacy appearance. These factors combine to create a deceptive and dangerous phishing resource that evades early detection. If you visited tethum.com, immediately change passwords for any accounts entered on the site. Scan your device for malware using an updated antivirus tool. Report the domain to your IT team or security provider and avoid re-entering credentials. Monitor financial accounts for unauthorized transactions. Block the domain at your network perimeter and update browser blocklists. Stay vigilant for follow-on phishing attempts leveraging captured credentials.