session-collab[.]land

The domain session-collab.land poses an elevated risk as a crypto drainer phishing site targeting users of Collab.Land services. It mimics the legitimate Collab.Land Connect login page to trick victims into entering sensitive credentials, which are then stolen to drain cryptocurrency wallets. This type of threat can lead to significant financial loss and compromise of personal digital assets.

PhishDestroy's analysis reveals that session-collab.land was created on March 21, 2026, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 188.114.96.3 and uses a Let's Encrypt SSL certificate, which can lend a false sense of security to unsuspecting users. VirusTotal reports that 12 out of 95 security vendors have flagged this domain, confirming its malicious intent. The page title found on the site is "Collab.Land Connect," which is designed to impersonate the legitimate Collab.Land service and deceive users.

If you have visited session-collab.land, it is critical to take immediate action. Do not enter any credentials or personal information on the site. If you have already submitted login details, change your passwords for related accounts immediately and enable two-factor authentication where possible. Monitor your cryptocurrency wallets for unauthorized transactions. Report the site to security platforms like PhishDestroy and consider running a malware scan on your devices. Always verify URLs carefully and access Collab.Land services only through official channels to avoid falling victim to such crypto draining scams.