sec-collab[.]land

PhishDestroy identifies sec-collab.land as an active crypto-draining phishing domain designed to trick users into connecting malicious wallets under the guise of a collaboration portal. This domain mimics legitimate services to deceive victims into approving fraudulent transactions that drain cryptocurrency assets. Security researchers have classified this threat as a high-risk generic phishing operation pending further analysis of its infrastructure and payload delivery mechanisms. This domain resolves to IP 172.67.205.162 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 12, 2026. Notably, sec-collab.land utilizes a Let's Encrypt SSL certificate to appear legitimate, yet VirusTotal currently shows 0 detections out of 95 security engines, indicating its recent emergence and potential to evade automated detection systems. The domain remains unlisted on major blocklists at this time, amplifying its threat as users may encounter it without prior warnings. Users who visited sec-collab.land should immediately disconnect any connected wallets and revoke permissions using tools like revoke.cash or your wallet's built-in security features. Do not approve any transactions or enter sensitive credentials on this domain. Report the domain to PhishDestroy for verification and consider using hardware wallets for future transactions. Monitor your accounts closely for unauthorized activity and enable transaction alerts to detect potential compromise early.