folksfinance-app[.]com

This domain, folksfinance-app.com, was registered on July 20 2026 through UnstoppableUS2 LLC and uses the Unstoppable Domains name servers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution points to the single IPv4 address 186.2.175.103. The domain appears on one public blocklist, specifically PhishDestroy, and has been reported as a generic phishing site. VirusTotal indicates that the domain was submitted to 95 scanning engines, none of which returned a detection at the time of analysis; the absence of a detection does not imply the domain is benign. No additional public reputation services (Safe Browsing, OTX, etc.) are referenced in the available intelligence, and no SSL certificate details, HTTP response codes, or page‑title information have been disclosed. The rapid creation date—only one day before the report date—combined with the lack of an established reputation suggests a high likelihood of malicious intent, especially given the blocklist entry. Defenders should treat any traffic to or from 186.2.175.103 as suspicious, enforce outbound DNS filtering for the domain, and consider adding it to internal deny lists. Continuous monitoring of the IP for beaconing or data exfiltration is advised, as is periodic re‑scanning with updated threat‑intelligence feeds. Because the domain is still active, any credential‑capture or credential‑stealing campaigns that reference a “folksfinance” brand could be leveraging this infrastructure; organizations should educate users to verify URLs and avoid entering personal or financial information on untrusted sites.