filestorage-filecoin[.]vercel[.]app

This domain is flagged as a high-risk phishing site specializing in brand impersonation, specifically targeting MetaMask wallet users. The threat involves credential harvesting through a fraudulent interface designed to mimic legitimate cryptocurrency wallet services, potentially leading to unauthorized asset transfers and financial loss. Analysis indicates the domain filestorage-filecoin.vercel.app remains active and is hosted on infrastructure associated with Vercel Inc. It resolves to IP address 216.198.79.67 (AS16509, Amazon.com, Inc., US location) and presents an SSL certificate issued by Google Trust Services (WR1). The page title 'Metadrive' suggests an attempt to deceive users into believing they are interacting with a legitimate MetaMask service. Security telemetry shows 3 out of 95 vendors on VirusTotal flagging this domain, and it appears on at least one security blocklist. Google Safe Browsing categorically identifies this domain as phishing, reinforcing its malicious nature. Mitigation requires immediate action from network security teams. Block access to the domain and its resolving IP (216.198.79.67) at firewall and DNS levels. Security teams should monitor for connections to this IP or domain within internal logs, particularly from endpoints handling cryptocurrency transactions. End-users should be alerted to verify wallet interfaces against official MetaMask URLs and avoid entering credentials on any site not explicitly linked from verified MetaMask channels. Cryptocurrency transaction monitoring should be heightened following potential exposure to this phishing domain.