tetherops[.]com

Domain tetherops.com is flagged as a brand impersonation threat, specifically targeting the Scroll brand. The page title 'TetherOps - Unified Operations Platform' suggests an attempt to mislead users into believing the site is a legitimate operational platform associated with Scroll. No specific drainer kit was identified in the investigation.

Technical indicators include a VirusTotal detection rate of 1/95 security vendors, indicating limited but confirmed malicious recognition. The domain was registered on December 11, 2025, through Enartia Single Member S.A., and resolves to IP address 172.67.194.62. Infrastructure analysis reveals the use of Cloudflare and HTTP/3 technologies. The SSL certificate is issued by Google Trust Services. The domain appears on 1 security blocklist and is blocked by PhishDestroy. Google Safe Browsing status is not explicitly listed, but the domain's presence on a blocklist suggests potential GSB flagging.

Current status indicates the domain has been taken offline. Response actions include blocklisting by PhishDestroy and flagging by one security vendor. Remaining risk is low due to domain offline status, but residual risk exists if the domain is reactivated or if similar domains are registered under the same registrar or IP range. Users are advised to verify any communications claiming to be from Scroll or TetherOps and to avoid interacting with unsolicited links referencing these brands.