secureflow-celo[.]vercel[.]app

Analysis indicates that the domain secureflow-celo.vercel.app is associated with credential phishing and presents itself using the page title "SecureFlow - Trustless Escrow on Celo." No verified evidence identifies a specific brand impersonation campaign or a known phishing kit from the available intelligence. The observed presentation is consistent with infrastructure intended to collect user credentials through deceptive web content. Based on the available indicators, the infrastructure should be treated as high risk while it remains operational.

Technical indicators show a VirusTotal detection score of 2/95 security vendors. The domain resolves to IP address 216.198.79.3. Registration was created on March 13, 2026 and the domain is registered through Vercel Inc. The SSL certificate is issued by Google Trust Services / WR1. The hosting IP is located in the US under AS16509 Amazon.com, Inc. Intelligence further indicates the domain appears on 3 security blocklists and has been blocked by multiple independent security organizations. Current intelligence confirms that the infrastructure remains active at the time of assessment.

The infrastructure is currently assessed as active with an overall high risk rating because credential harvesting sites may rapidly collect authentication data before broader detection occurs. Recommended response actions include blocking the domain and associated indicators at network and endpoint controls, monitoring authentication logs for potential credential exposure, reviewing outbound connections to the resolved IP, and resetting any credentials that may have been submitted. Continued monitoring is advised because the relatively low VirusTotal detection count of 2/95 does not eliminate risk, and active phishing infrastructure may evolve or rotate while remaining operational.