cdn-collab[.]land

The domain cdn-collab.land has been identified as a generic phishing threat specifically impersonating the legitimate Collab.Land platform. This domain is currently offline, which may indicate it was taken down after being reported or is temporarily inactive. PhishDestroy assesses this as an elevated risk due to its clear intent to deceive users into believing it is associated with the authentic Collab.Land service, potentially leading to credential theft or cryptocurrency wallet draining.

Technical indicators reveal that cdn-collab.land was created on May 28, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with suspicious domains. It resolves to IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate (E7), which is common for phishing sites as it provides a false sense of security. VirusTotal flagged the domain with 2 out of 95 security vendors marking it as malicious, and it appears on 1 security blocklist. AlienVault OTX reports its presence in 1 threat intelligence pulse, confirming its malicious reputation in the security community. The page title was observed as "Collab.Land," further reinforcing the impersonation attempt.

Given that the domain is now offline, users who may have previously encountered or interacted with it are advised to monitor their accounts for suspicious activity, especially if they entered credentials or connected cryptocurrency wallets. PhishDestroy recommends that organizations block this domain at the network level and educate users about verifying URLs before engaging with any login pages or wallet connection prompts. For personal safety, avoid clicking on links from unsolicited communications and always double-check the official domain of Collab.Land before proceeding.