collab[.]land-log[.]app

This domain, collab.land-log.app, is flagged as a high-risk phishing site targeting users of the Collab.Land platform. Analysis indicates the threat type is brand impersonation, specifically a fake login portal designed to harvest credentials. The page title, 'Collab.Land Connect,' mimics legitimate Collab.Land authentication flows, increasing the likelihood of user deception. No crypto drainer kit signatures were observed, but the domain exhibits classic phishing infrastructure characteristics. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 104.21.30.170, hosted on AS13335 (Cloudflare, Inc.) with a geolocation in the US. VirusTotal detection shows 8 out of 95 security vendors flagging the domain as malicious. The domain is registered through Cloudflare, Inc., and currently lacks an SSL certificate, a red flag for phishing activity. It appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. Google Safe Browsing (GSB) status was not explicitly provided but is presumed to be flagged given the blocklist presence. As of the latest assessment, collab.land-log.app remains active and poses a continued risk to users. Response actions should include immediate blacklisting of the domain and IP across security gateways, as well as user education to recognize phishing attempts targeting Collab.Land. The absence of SSL further degrades trust, and organizations should monitor for credential theft or follow-on attacks leveraging harvested data. No takedown has been observed, and the domain’s Cloudflare registration may complicate mitigation efforts. Continued vigilance is advised.