teaprotocol[.]community

Analysis of the domain teaprotocol.community indicates it is an active phishing site targeting users of the Tea Protocol, a decentralized project. The domain was registered on June 8, 2026, through an undisclosed registrar. As of July 29, 2026, the domain is flagged by 6 of 91 security vendors on VirusTotal, suggesting detection by a minority of engines but still warranting caution. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which classify it as malicious infrastructure.

No associated IP addresses, hosting providers, or autonomous system numbers (ASNs) are currently documented in available intelligence. The domain's classification as a phishing site is supported by its inclusion in multiple blocklists, though the exact nature of the phishing content remains unconfirmed due to the absence of page-level analysis. The name 'teaprotocol.community' closely resembles the legitimate Tea Protocol branding, which may be leveraged to deceive users into disclosing credentials, private keys, or other sensitive information.

Defenders are advised to treat this domain as high-risk and implement blocking measures at the network and endpoint levels. Organizations should monitor for connections to this domain in logs and alert users who may have interacted with it. Further investigation into the hosting infrastructure and any linked campaigns is recommended to assess the full scope of the threat.