folks-finance-dashboard[.]vercel[.]app

This domain, folks-finance-dashboard.vercel.app, is actively flagged as a high-risk phishing site targeting users of Folks Finance, as indicated by its page title and Google Safe Browsing's social engineering classification. Infrastructure analysis reveals it is hosted on Vercel Inc.'s platform, resolving to IP 216.198.79.3 under AS16509 (Amazon.com, Inc.) in the US. The domain was registered on December 13, 2025, and remains operational with an HTTP 200 status, suggesting it is actively serving content. SSL certification is provided by Google Trust Services (WR1), and technologies detected include Node.js, React, Next.js, and Webpack, consistent with modern web applications but not inherently malicious.

Defenders should note that the domain appears on at least one security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, indicating no credibility. While 11 of 95 security vendors on VirusTotal flag this domain, the absence of additional context (e.g., specific payloads, redirect chains, or kit fingerprints) limits deeper classification. The combination of Vercel hosting, a recent registration date, and social engineering flags aligns with common phishing infrastructure patterns. No concrete evidence links this domain to a known phishing kit or campaign beyond the Folks Finance branding implied by the page title.

Recommended actions include blocking the domain at the DNS or proxy level, monitoring for related subdomains or IPs under the same ASN, and reviewing logs for connections from internal networks. If Folks Finance is a known service within your organization, user education and MFA enforcement are advised to mitigate credential harvesting risks. Further analysis of the site's content (e.g., login forms, API calls) would clarify the exact phishing mechanics, but such investigation should be conducted in a controlled environment to avoid exposure.