ca-collab[.]land

ca-collab.land is currently flagged as a high‑risk generic phishing site. The domain resolves to 172.67.149.227, a Cloudflare‑managed address located in Canada. DNS is served by savanna.ns.cloudflare.com and lamar.ns.cloudflare.com. The active HTTPS service presents a certificate issued by Google Trust Services under the WE1 hierarchy, indicating a legitimate‑looking TLS layer. HTTP requests return status 200, confirming the web server is operational. Independent analysis by PhishDestroy has placed the domain on its blocklist, and it appears on one additional security blocklist. VirusTotal scans show six of ninety‑one AV engines have identified the host as malicious, reinforcing the suspicion. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED, but no further WHOIS details are provided. No public content inspection has been performed, so the exact phishing lure and credential‑harvesting mechanisms remain unknown. Defenders should block the domain at network perimeters, add it to URL filtering rules, and continue monitoring for any changes in hosting or certificate details. Continuous re‑scanning with multi‑engine services is advised to detect possible re‑classification.