lab-collab[.]land

The domain lab-collab.land has been identified as an active high-risk phishing threat as of July 19, 2026. This assessment is based on its inclusion in one security blocklist, specifically flagged by PhishDestroy, and detection by 4 out of 91 vendors on VirusTotal. The domain remains operational, serving content over HTTP with a status code 200. It resolves to IP address 104.21.59.243, which is associated with Cloudflare, Inc. in Canada, and utilizes Cloudflare nameservers (macy.ns.cloudflare.com and cosmin.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services (WE1). Registration details indicate the domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. At this time, there is no evidence specifying the particular phishing technique, targeted brand, or exact site content, as such elements have not been analyzed or disclosed. Defenders should treat this domain as a confirmed phishing source due to multiple independent detections and its listing on an established blocklist. Immediate blocking and monitoring for related infrastructure are advised. Ongoing vigilance is recommended as the domain remains live and active in malicious campaigns.