land-hub[.]app

This domain, land-hub.app, is assessed as an elevated-risk phishing site targeting users of the Collab.Land platform, as indicated by the page title 'Collab.Land' observed in technical scans. Analysis reveals the domain was flagged by seven of 95 security vendors on VirusTotal and appears in one AlienVault OTX threat intelligence pulse, confirming its presence in active threat tracking systems. It is currently blocked by PhishDestroy and listed on one security blocklist, reinforcing its classification as malicious.

Infrastructure analysis shows the domain was registered through NiceNIC International Group Co., Limited and resolves to IP address 76.76.21.21, hosted on Amazon.com, Inc. (AS16509) in the United States. The site employed Cloudflare nameservers (beau.ns.cloudflare.com and marjory.ns.cloudflare.com) and used HTTP/3, with an SSL certificate issued by Google Trust Services (WE1). As of the report date, the domain has been taken offline, limiting further real-time verification of its content or active exploitation.

While the exact phishing mechanics remain unconfirmed due to the site's offline status, defenders should treat this domain as a confirmed phishing resource. Network and endpoint security teams are advised to block the domain and its resolved IP at perimeter controls, review logs for prior connections, and monitor for related infrastructure reuse. The combination of detection vendor flags, threat intelligence pulses, and the domain's alignment with a known brand target justifies immediate defensive action despite the current offline status.