seedtfy[.]com

The domain seedtfy.com was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IPv6 address 2a06:98c1:3120::3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presents an SSL certificate issued by GTS CA 1P5, indicating a valid TLS handshake despite the offline status. The page title observed during the brief crawl is "Empowering Innovation with Technology," and the domain is explicitly linked to a brand impersonation campaign targeting the brand celer.

Reputation metrics are alarming: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on two security blocklists, including PhishDestroy and Enkrypt. VirusTotal scanning recorded a single positive detection out of 93 security vendors, demonstrating that at least one vendor identified malicious characteristics. The combination of a brand impersonation motive, low trust score, blocklist presence, and a Cloudflare‑hosted IP suggests a deliberate attempt to exploit celer’s reputation.

Uncertainties remain regarding the exact payload or credential‑harvesting mechanisms, as the live site content was not captured before takedown. Defenders should continue to block seedtfy.com at perimeter and DNS layers, monitor for any re‑registration or similar domains, and enforce strict verification of communications purportedly from celer. Additional threat‑intel feeds should be queried for related indicators of compromise, and any alerts triggered by the single VirusTotal positive should be investigated to confirm the nature of the malicious activity.