land-wallet[.]top

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Discord users through a fraudulent Collab.Land interface. The infrastructure is designed to deceive victims into believing they are interacting with legitimate Collab.Land services, likely to harvest credentials or deploy malicious payloads under the guise of token-gated community access or collaboration tools.

Analysis indicates the domain land-wallet.top was registered on May 29, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 76.76.21.21 and is currently offline. Security vendors on VirusTotal flagged the domain with 4 detections out of 95, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was blocked by PhishDestroy. AlienVault OTX records the domain in one threat intelligence pulse, confirming its association with malicious activity.

To mitigate risks associated with this brand impersonation threat, organizations and users should immediately block the domain land-wallet.top and its resolving IP 76.76.21.21 at the network level. Discord community administrators should warn members about fake Collab.Land pages and enforce multi-factor authentication for all account access. Users should verify domain authenticity by cross-referencing official Collab.Land communication channels and avoid entering credentials on untrusted sites. Security teams are advised to monitor for related domains registered through NiceNIC, particularly those created in late May 2025, and integrate the provided indicators into threat detection systems.