collab-land-union[.]com

Analysis of collab-land-union.com indicates that the domain was registered on 21 February 2026 through Tucows Domains Inc. The domain resolves to IP address 172.67.157.234, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by Cloudflare name servers jake.ns.cloudflare.com and sierra.ns.cloudflare.com, and the TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming the use of a legitimate certificate authority. Scamadviser assigns a trust score of 45 out of 100, reflecting a moderate level of risk.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy, indicating that at least one anti‑phishing organization has taken remediation action. VirusTotal analysis shows that three of ninety‑three scanning engines flagged the domain, providing additional corroboration of malicious intent. The site is currently taken offline, and no HTTP response or page title is available for further content analysis.

While the infrastructure points to a typical phishing staging environment—use of Cloudflare for anonymity, a recent registration date, and low trust score—the lack of publicly visible content limits definitive classification of the targeted brand or lure. Defenders should continue to block the domain and its associated IP address at network perimeter, monitor for any re‑registration or resurrection of the site, and incorporate the domain into threat‑intel feeds. Ongoing vigilance is recommended, especially given the rapid creation-to‑abuse timeline observed in similar campaigns.