web3-login-six[.]vercel[.]app

Analysis indicates that web3-login-six.vercel.app is an active credential phishing domain classified as high risk. The site resolves to IP 216.198.79.3, which is geolocated in the United States and attributed to Lefkoff Industries. The domain was created on April 27, 2026 and is hosted on Vercel infrastructure, with HSTS enabled and an SSL certificate issued by Google Trust Services under the WR1 profile. The page title returned by HTTP 200 requests is "Bipinsea - I see you NFT Marketplace," suggesting a possible lure toward NFT-related assets. Security telemetry shows the domain is listed on three blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports a single detection out of 91 scanned vendors. Nameserver data is unavailable (NS_NOT_FOUND). Defenders should immediately block network traffic to 216.198.79.3 and add web3-login-six.vercel.app to URL filtering policies. Continuous monitoring of related Vercel-hosted subdomains is advised, as the attacker may reuse the same hosting environment for additional phishing campaigns. Further investigation of the page content and any associated credential collection endpoints is recommended to determine the scope of compromised accounts.