teloracoin[.]com

The domain teloracoin.com is identified as a high-risk generic_phishing threat targeting cryptocurrency users. Analysis indicates the site impersonates legitimate token marketplaces, specifically mimicking the branding of Telora Token (TLRA), to harvest credentials or distribute malicious payloads. The domain is currently offline, but prior activity suggests it was operational for credential theft or fraudulent transactions. Infrastructure analysis reveals teloracoin.com was flagged by 11 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain resolves to IP address 216.198.79.1 and appears on three security blocklists, including PhishDestroy, OISD, and InversionDNS. Registered through Unstoppable Domains Inc. on April 25, 2026, the site employed a Let's Encrypt SSL certificate and utilized technologies such as Vercel and HSTS. The page title, 'Telora Token - TLRA Cryptocurrency Marketplace,' aligns with known phishing tactics to deceive users into believing the site is a legitimate trading platform. As of the latest assessment, teloracoin.com has been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations and individuals are advised to block the domain and its associated IP (216.198.79.1) at the network level. Users should verify cryptocurrency platforms through official channels and avoid entering credentials on untrusted sites. Security teams should monitor for related indicators, including the domain's creation date and registrar details, to prevent similar threats.