v5-collab[.]land

PhishDestroy identifies v5-collab.land as a live crypto drainer phishing page designed to trick cryptocurrency users into connecting their wallets and approving malicious token transfers. The domain mimics legitimate collaboration platforms to steal funds, primarily targeting DeFi and NFT communities. Security telemetry shows that only 1 out of 95 VirusTotal scanners currently detects the payload, indicating low but escalating detection coverage that could rise rapidly as intelligence spreads. This domain was flagged with seed 317033 and resolves to IP 188.114.96.3. It was registered on April 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and secured with a Let’s Encrypt SSL certificate to appear trustworthy. Despite its recent creation and low detection rate, the presence of a live drainer script and active hosting infrastructure elevates the risk level to elevated, warranting immediate caution. If you visited v5-collab.land or connected your wallet, revoke any token approvals immediately using tools like revoke.cash or Etherscan’s approval checker. Clear browser cache and cookies, run a malware scan, and consider rotating wallet credentials if suspicious transactions appear. Report the domain to your wallet provider and relevant crypto security platforms to help block further abuse.