tetherstrcn[.]com[.]etherstrcn[.]com

PhishDestroy has identified tetherstrcn.com.etherstrcn.com as an active crypto drainer posing as a Tether-related service. This domain employs deceptive tactics to trick users into connecting cryptocurrency wallets under the guise of legitimate Tether operations. The site mimics official Tether branding or functionality to lure victims into authorizing malicious transactions that drain wallet funds. Security teams assess this as a high-risk threat due to its active status and lack of detection on major antivirus platforms. This domain was flagged for its recent creation date of June 21, 2025, registered through TUCOWS.COM, CO., and resolving to IP 185.247.225.7. A VirusTotal scan returned 4/95 detections, indicating no current antivirus coverage, while the Let's Encrypt SSL certificate adds a veneer of legitimacy. The domain remains unflagged on global blocklists as of the latest analysis. These factors—combined with the targeting of cryptocurrency users—elevate its risk profile despite its low detection rate. Users who have visited tetherstrcn.com.etherstrcn.com should immediately disconnect from the site and revoke any wallet connections or permissions granted during the session. Run a full antivirus scan and monitor wallet activity for unauthorized transactions. Report the domain to PhishDestroy for further analysis and inclusion in threat intelligence feeds. If funds were drained, file an incident report with local cybercrime units and your wallet provider. Always verify domain authenticity via official channels before engaging with cryptocurrency services.