tellorchain[.]com

The domain tellorchain.com was registered on March 17, 2025 through NameCheap, Inc. and presently resolves to the IP address 104.21.32.1, which belongs to AS13335 Cloudflare, Inc. in the United States. An SSL certificate identified as WE1 is present, indicating the site operated over HTTPS. The site’s page title, "Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Tellorchain," aligns with a crypto‑exchange narrative, yet the domain is classified as a crypto scam that impersonates the Avalanche brand.

Reputation services provide extremely low trust scores: Scamadviser rates the domain 1 / 100 and Gridinsoft also assigns a score of 1 / 100, reflecting a high likelihood of malicious activity. Detection telemetry shows the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 93 scanning engines, and AlienVault OTX lists the domain in one threat‑intelligence pulse.

The overall risk level is elevated, and the domain’s current status is offline, suggesting the operators have taken the site down, possibly after exposure. Defenders should continue to block traffic to 104.21.32.1 and any associated Cloudflare edge nodes, monitor for re‑registration of the domain or similar naming patterns, and include tellorchain.com in threat‑intel feeds. Because the site’s content has not been captured beyond the page title, the precise phishing mechanics remain unknown; however, the combination of low trust scores, a positive VirusTotal flag, and active blocklist listings provides sufficient evidence to treat the domain as malicious and to enforce preventive controls.