Is ci-collab.land a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is served from a recently registered domain whose homepage is titled "Collab.Land", a name that matches a separately hosted web address. It presents a short single-page front end of modest text content. The apparent purpose is a community or access-management style service, but the evidence does not establish a defined business model or an identifiable operator.

Scam/Impersonation Risk

The assessment is clearly cautionary. Several independent threat-intelligence sources currently flag the domain as malicious or suspicious, including more than one top-tier security vendor, so this is a confirmed blacklist-level reputational hit. It is not a marginal or single-source flag. No conflicting legal identities and no confirmed brand-impersonation or phishing-page findings were recorded. The risk therefore rests on the external detections, which are decisive by themselves. The homepage title uses the "Collab.Land" name while the domain is a different, prefixed hostname. That mismatch is not proof of impersonation, but together with the detections it is the pattern a lookalike deployment would produce. Behavioural testing found no wallet-connection prompts, clipboard tampering, hidden forms, cloaking or credential posts to outside parties. Even so, almost all observed network traffic during the sessions went to external destinations. Many of those destinations were not on the known-benign list, and the page made several outbound data submissions. For a minimal page, that off-site dependency is unusual and consistent with third-party tracking or content-injection components. The page's actual function is unconfirmed. Evidence:

• Homepage: titled "Collab.Land" while served from a different, prefixed domain; no confirmed impersonation finding.
• Reputation checks: multiple security engines currently rate the domain malicious or suspicious, including two top-tier vendors.
• Behavioural sandbox: 18 external XHR/fetch requests, 12 to non-whitelisted destinations, and 3 external POST requests across 3 successful runs.
• Domain provenance: registered 2026-08-23 (~0.17 years old, roughly two months).

Regulatory Verification Notes

The site discloses no regulatory status, licence or registration number, and the evidence contains no regulator or third-party registry match. No broker-reputation entry exists either. Ownership is opaque: the registrant data is incomplete or concealed, and no legal entity can be tied to the domain. This is an ownership-opacity condition, not an identity contradiction. It is a verification gap that adds to the reputational concern but is not independent proof of fraud. The domain is too young to carry any meaningful operating history, and the web archive holds only a handful of captures from the past few weeks. Technical hygiene is basic: transport encryption is valid but domain-validated only, which confirms control of the domain and says nothing about who operates it. Evidence:

• Domain registration: registrar NICENIC INTERNATIONAL GROUP CO., LIMITED; created 2026-08-23, expires 2027-08-23; registrant details incomplete.
• Web archive: 2 snapshots between 2026-09-16 and 2026-09-22 (1 year tracked).
• Transport security: TLS certificate issued by WE1 (DV), valid to 2027-01-19.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).

What to Verify Next

Treat the "Collab.Land" naming as unverified until it is checked independently. Navigate to the official Collab.Land presence through a bookmarked or independently sourced address, not through this domain, and see whether the operators acknowledge the prefixed hostname. Look the domain up in public abuse and takedown databases, and re-test the reputation status after any claimed remediation. Confirm the official support and contact channels through an offline or separately sourced route. Identify the operating entity through direct correspondence before any dealing with it. Evidence:

• Homepage: title and branding cannot be matched to an operator from on-site information.
• Domain age: created 2026-08-23, so no longstanding track record exists to corroborate identity.
• Reputation: the current detections are the main reason to check for an official, independently confirmed hostname.

Summary Verdict

The site holds an elevated-risk posture. Multiple corroborated third-party detections, a very young domain and an unidentified operator outweigh the basic technical hygiene and the unremarkable behaviour in testing. Its legitimacy cannot be established, and the evidence argues against treating it as a safe destination.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF, and every observed address is an edge node, so the true origin is not visible. This protection is a mitigating factor only. It does not offset the external threat detections, and it prevents independent verification of where the content is actually hosted. That limitation could also mask a rapid content swap.

Closing Assessment

Use is limited to passive viewing, if at all. The site should not be used to sign in, enter credentials, connect a wallet or complete any payment or financial transaction.