teamainnnet[.]com

Analysis of teamainnnet.com shows a short‑lived infrastructure supporting a generic phishing campaign that masquerades as a $TEA Mainnet allocation portal. The domain was registered on June 04, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolved to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site employed a Google Trust Services / WE1 SSL certificate, indicating the use of a legitimate certificate authority but offering no assurance of the site’s intent. The page title retrieved from the live snapshot reads “$TEA Mainnet Live — Claim Your Allocation,” confirming the lure used to entice victims.

Security telemetry shows the domain is flagged by multiple anti‑phishing services, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, and appears on four independent security blocklists. VirusTotal scans recorded six of ninety‑one AV engines flagging the domain, reinforcing the malicious classification. Additional reputation data is poor: Gridinsoft assigned a trust score of 0 out of 100, and the domain’s nameservers are jermaine.ns.cloudflare.com and sara.ns.cloudflare.com, both standard Cloudflare resolvers.

The service has been taken offline, but the infrastructure footprint remains observable. Defenders should continue to block the domain and its associated IP, update intrusion detection signatures, and monitor for any re‑use of the same registrar or hosting assets. Threat intelligence feeds should be enriched with the observed indicators of compromise, and any future DNS queries for teamainnnet.com or its Cloudflare IP should be treated as high‑confidence malicious activity.