claims-folkfinancez[.]vercel[.]app

The domain claims-folkfinancez.vercel.app was registered on May 27, 2026 through the Vercel platform and resolves to the IPv4 address 64.29.17.67, which is geo‑located in the United States and associated with Vercel, Inc. The site presents the page title “Introducing the FOLKS token,” indicating a cryptocurrency‑related lure. VirusTotal scans have reported three detections out of ninety‑one antivirus engines, and the domain appears on three independent blocklists, including PhishDestroy, MetaMask, and SEAL. The TLS certificate is issued by Google Trust Services under the WR1 intermediate, confirming a valid HTTPS connection. Gridinsoft assigns the domain a trust score of zero out of one hundred, reinforcing its malicious classification. The threat profile is identified as a crypto drainer with a high risk rating and remains active as of the report date. No additional content analysis is available beyond the page title, so the precise harvesting mechanisms are unconfirmed. Defenders should block the domain at network perimeters, update endpoint security signatures to include the listed blocklist identifiers, and monitor DNS queries for the associated IP address. Continuous re‑evaluation is recommended should further indicators emerge.