bitfury-tetherwave[.]com

Analysis of bitfury-tetherwave.com indicates that the domain is actively being used for phishing operations. The domain was registered on February 16, 2026 through Ultahost, Inc. and is hosted on Cloudflare infrastructure, as evidenced by the authoritative nameservers dakota.ns.cloudflare.com and evangeline.ns.cloudflare.com resolving to the IP address 188.114.97.3. The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocking service, confirming its malicious intent.

VirusTotal records show that the domain was scanned by 91 antivirus vendors, and at the time of analysis no detections were reported; this absence of detections does not constitute a safety assurance and should be interpreted as a lack of current signatures rather than validation of legitimacy. No additional intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information is presently available, leaving those aspects of the infrastructure unverified. Given the confirmed phishing classification, defenders should proactively block bitfury-tetherwave.com at the DNS and proxy layers, monitor traffic to the associated IP address, and consider adding the domain to internal blocklists.

Ongoing observation of the Cloudflare‑hosted IP is advised, as the infrastructure could be leveraged for further malicious campaigns. The limited visibility into the site’s content underscores the need for continuous threat‑intel updates to capture any future changes in behavior or targeting.