net-collab[.]land

This domain, net-collab.land, is actively flagged as a high-risk phishing site impersonating Collab.Land, a legitimate platform. Registered on June 5, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 76.76.21.21 and presents a page title identical to the authentic Collab.Land service. Analysis indicates the domain is currently active, with 3 security blocklists listing it as malicious. One out of 95 security vendors on VirusTotal has flagged the domain, while AlienVault OTX records it in 14 threat intelligence pulses, suggesting broader detection within the security community. The SSL certificate issued by Google Trust Services may lend a superficial appearance of legitimacy, but this is a common tactic in phishing operations to evade casual scrutiny. The domain's trust score of 0/100 from Gridinsoft further corroborates its malicious classification. While the exact phishing kit or payload remains unconfirmed, the domain's infrastructure and timing—registered just over a month prior to this assessment—align with typical phishing campaign lifecycles, where domains are rapidly deployed and discarded. Defenders should prioritize blocking this domain at the network level, particularly given its resolution to a static IP address. The presence of the Collab.Land page title suggests the site is designed to deceive users familiar with the legitimate service, likely targeting credentials or financial information. Monitoring for connections to 76.76.21.21 may reveal additional compromised hosts or related malicious activity. Given the domain's recent registration and active status, it is advisable to treat all interactions with net-collab.land as hostile until further evidence suggests otherwise. No legitimate use case for this domain has been identified.