web3-projects-beta[.]vercel[.]app

This domain, web3-projects-beta.vercel.app, is flagged as a high-risk brand impersonation threat targeting Uniswap, a decentralized cryptocurrency exchange. Analysis indicates the site mimics Uniswap’s official interface, likely to deceive users into disclosing wallet credentials or authorizing malicious transactions. No specific drainer kit has been conclusively identified, but the infrastructure aligns with known phishing campaigns targeting Web3 platforms. Infrastructure analysis reveals the domain resolves to IP address 216.198.79.195, hosted under Amazon.com, Inc. (AS16509) in the United States. The domain is registered through Vercel Inc., a platform commonly exploited for rapid deployment of phishing sites. VirusTotal reports 21 out of 95 security vendors flagging this domain as malicious. The SSL certificate is issued by Google Trust Services (WR1), a legitimate provider often abused in phishing operations. The domain appears on four security blocklists, including PhishDestroy, MetaMask, SEAL, and PhishingDB. No Google Safe Browsing (GSB) status is provided, but the presence on multiple blocklists suggests broad detection. The domain remains active as of the latest verification, posing an ongoing risk to users. Response actions include its inclusion on multiple security blocklists, which may mitigate exposure for users of those services. However, the domain’s continued operation and hosting on a reputable provider’s infrastructure indicate persistent risk. Users are advised to verify domain authenticity before interacting with any cryptocurrency-related site, particularly those requesting wallet connections or private key access. Organizations should monitor for connections to 216.198.79.195 and the domain itself in network logs to identify potential compromise.