# web3-collab.land — SUSPICIOUS

> PhishDestroy identifies web3-collab.land as a live smishing domain impersonating Web3 collaboration tools. Resolves to IP 188.114.97.

## Summary
PhishDestroy identifies the domain web3-collab.land as an active generic phishing site operating under the guise of a Web3 collaboration platform. The resource is designed to deceive users into surrendering sensitive credentials or installing malicious drainer kits under the pretense of accessing collaborative tools. No specific brand is being impersonated beyond the broad Web3 ecosystem theme, which increases the likelihood of targeting cryptocurrency and blockchain professionals.

Technical analysis reveals web3-collab.land resolves to IP address 188.114.97.3 and was registered on March 24, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain currently shows 0/95 detections on VirusTotal and carries a valid Let's Encrypt SSL certificate, enhancing its legitimacy appearance. It has been flagged on 2 public blocklists and is actively blocked by ScamSniffer and Enkrypt. Despite low detection rates, the combination of recent registration, valid SSL, and blocklist presence suggests emerging malicious intent in the Web3 threat landscape.

As of the latest assessment, the domain remains active with a status marked as 'under_investigation'. Immediate defensive actions include blacklisting by security vendors, domain takedown requests, and continued monitoring for drainer kit deployment. While the immediate risk to users is elevated due to active blocking by two major security extensions, the domain’s recent creation and lack of widespread detection indicate a high potential for further malicious evolution. Users are advised to avoid accessing the site, report encounters, and remain vigilant for similar emerging domains. Ongoing analysis continues under seed 4f0e68.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 07:37:40
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["ScamSniffer", "Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b6dbe260-3fce-45d2-b748-eecfb0f677b0
- PhishDestroy: https://phishdestroy.io/domain/web3-collab.land/
- LLM endpoint: https://phishdestroy.io/domain/web3-collab.land/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web3-collab.land/
Last updated: 2026-03-26