collab[.]otp-land[.]com

Analysis indicates that collab.otp-land.com was registered on 23 November 2025 through Tucows Domains Inc. The domain resolves to the IP address 188.114.96.3, which is an address owned by Cloudflare (AS13335) and geolocated in the United States. No SSL certificate is presented for the host, confirming that the site does not serve traffic over HTTPS. The domain is currently taken offline; PhishDestroy has already blocked it and the site appears on one public security blocklist. Gridinsoft assigns a trust score of 0 out of 100, reflecting a very low reputation.

VirusTotal records three detections out of ninety‑five scanners, demonstrating that multiple security vendors have flagged the domain as malicious. Nameservers for the domain are sri.ns.cloudflare.com and tia.ns.cloudflare.com, both operated by Cloudflare, which is consistent with the hosting infrastructure. No page title, brand reference, or detailed payload information is available because the service is offline and no HTTP response was captured, leaving the exact phishing lure or credential‑stealing technique unconfirmed.

Likewise, no entries are observed in Google Safe Browsing or OTX for this domain. Defenders should immediately add collab.otp-land.com and its resolving IP 188.114.96.3 to outbound and inbound blocklists, monitor DNS queries for any resurgence, and enforce TLS inspection on traffic destined for Cloudflare‑origin IP ranges to catch any future attempts to serve content over HTTPS. Logging of connections to the IP and user education about unexpected OTP‑Land credential requests are also recommended to reduce exposure to this elevated‑risk phishing infrastructure.