colabdesk[.]site

The domain colabdesk.site was registered on 2026-03-11 through Spaceship, Inc. and is hosted on IP 84.200.91.213, which resolves to ASN214036 (Ultahost, Inc.) in Germany. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net. A Let’s Encrypt certificate (R12) is active, and the web server returns HTTP 200 for the root URL. The page title observed is "Web3 Fix Tool - Collab.Land," indicating a fraudulent Web3‑related lure. Infrastructure analysis shows a stack of Node.js, Ubuntu, Vue.js, Nuxt.js and Nginx, consistent with many crypto‑phishing kits. The domain appears on three security blocklists and is specifically listed by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports a single positive detection out of 94 scanning engines, reinforcing the malicious classification. The threat is catalogued as a generic_phishing campaign with a crypto‑scam focus; the risk level is high and the status remains active. Current evidence confirms the domain’s malicious intent, but the exact content and any credential‑capture mechanisms have not been publicly disclosed. Defenders should immediately block the domain and its associated IP, incorporate its nameservers into DNS‑sinkhole policies, and monitor for any new sub‑domains or IP changes. Continuous re‑scanning with multi‑engine services is advised to detect any evolution of the payload or additional detections.