celomysterybox[.]vercel[.]app

This domain, celomysterybox.vercel.app, is identified as a high-risk phishing site specializing in cryptocurrency fraud. Analysis indicates the site impersonates legitimate Mystery Box reward platforms to deceive users into entering wallet credentials or approving malicious transactions. The domain remains active as of the latest assessment, posing an immediate threat to visitors. Infrastructure analysis reveals the domain was registered through Vercel Inc. on March 13, 2026, and resolves to IP address 216.198.79.3 (AS16509, Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common obfuscation tactic among phishing sites. Security telemetry shows the domain is flagged by 4 of 95 VirusTotal vendors and appears on 3 distinct blocklists, including PhishDestroy and MetaMask. The page title, 'Mystery Box,' aligns with known phishing templates designed to mimic reward-based crypto promotions. Current status confirms the domain remains operational, with no takedown actions observed. Organizations and individuals are advised to block the domain and its associated IP (216.198.79.3) at the network level. Users should avoid interacting with any content hosted on celomysterybox.vercel.app, particularly prompts requesting wallet connections or seed phrase disclosures. Security teams are recommended to monitor for related indicators, including the domain's creation date (March 13, 2026) and registrar (Vercel Inc.), as part of broader threat-hunting initiatives.