earno-celo[.]vercel[.]app

The domain earno-celo.vercel.app was registered on March 13 2026 through Vercel Inc. and currently resolves to the IPv4 address 64.29.17.131 located in the United States. The site returns HTTP status code 200 and presents the page title “Earno – Your way to earn”. The content has been classified as a cryptocurrency‑related phishing campaign and is assigned a high risk rating. Infrastructure analysis shows the host is operated by Vercel, as indicated by the presence of Vercel‑specific headers and the HSTS header enforcing HTTPS. The IP belongs to Amazon.com, Inc. (AS16509) and is protected by a Google Trust Services / WR1 SSL certificate, confirming the use of a legitimate certificate authority. No additional services or anomalous ports were observed beyond standard web traffic. Reputation data reinforces the malicious nature of the domain. It appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score is 0 out of 100, and VirusTotal records two detections out of ninety‑five scanned vendors. The combination of a low trust score, blocklist presence, and the cryptocurrency phishing label aligns with the high‑risk assessment. Defenders should immediately add earno-celo.vercel.app to network deny lists and enforce URL filtering for any outbound connections to the resolved IP address. Continuous monitoring of DNS queries for the domain and its associated IP is advised, as well as the deployment of sink‑hole or takedown requests where possible. Users should be warned that any unsolicited messages referencing “Earno” or promises of earnings are likely tied to this active phishing operation.