my-collectibles[.]xyz

Analysis of the domain my-collectibles.xyz confirms it as a phishing site, designed to steal sensitive information from unsuspecting users. The domain employs Cloudflare, a technology often used to obscure the true infrastructure and enhance the site's credibility.

Infrastructure analysis reveals that my-collectibles.xyz was registered through NiceNIC International Group Co., Limited on February 27, 2026. The domain is flagged by 14 out of 95 security vendors on VirusTotal, a notable indication of its malicious nature. Additionally, the domain appears on 1 security blocklist and is actively blocked by PhishDestroy. The IP address 188.114.97.3 to which the domain resolves further suggests a possible involvement in phishing activities.

Users who have visited my-collectibles.xyz should immediately check their account activity and change any passwords that may have been compromised. It is recommended to monitor financial statements and credit reports for any unauthorized transactions or activity. If any suspicious activity is detected, users should report it to their financial institutions and consider using two-factor authentication for added security.