tetheriq[.]ch

Analysis as of July 27, 2026 indicates that the domain tetheriq.ch is currently active and resolves to the IPv4 address 187.127.93.37. The domain is delegated to the authoritative name servers cosmos.dns-parking.com and nova.dns-parking.com, which are commonly used for parked or disposable domains. VirusTotal records show that two of ninety‑one scanning engines have flagged the domain, indicating a modest but non‑trivial detection rate.

The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy service, confirming that at least one security feed considers it malicious. No additional public intelligence such as a known brand target, page title, SSL certificate details, or HTTP response codes has been published, so the exact content hosted at the domain remains unverified. The limited detection footprint suggests that the infrastructure may be in early deployment or that the phishing kit employed is low‑profile.

Defenders should treat tetheriq.ch as a high‑risk indicator given its classification as a generic phishing campaign and its active status. Recommended mitigations include adding the IP address 187.127.93.37 and the domain name to outbound and inbound filtering rules, updating DNS blocklists, and monitoring for any future appearance in additional threat feeds. Continuous re‑evaluation is advised, as further analysis may reveal the specific brand or credential‑harvesting technique used.