web3-app-nine[.]vercel[.]app

Analysis of web3-app-nine.vercel.app indicates an active high‑risk infrastructure used for a crypto‑drainer phishing campaign. The domain was registered on 27 April 2026 through Vercel Inc. and resolves to IP 216.198.79.195, a Vercel‑owned address located in the United States. TLS is provided by a Google Trust Services / WR1 certificate, and the site presents HTTP 200 responses with HSTS enabled, confirming a legitimate‑looking HTTPS deployment. Automated reputation services have assigned a Gridinsoft trust score of 0/100, and the domain appears on three security blocklists, having been blocked by PhishDestroy, MetaMask, and SEAL. The observed phishing kit is identified as an “Airdrop Scam,” and the declared scam type is a crypto drainer. No nameserver information is available. While VirusTotal scans have not produced detections, the absence of alerts does not constitute safety. Given the confirmed phishing kit, the high‑risk rating, and active blocking by multiple defenses, defenders should immediately denylist the domain, monitor related IP activity, and enforce strict outbound controls to prevent credential or wallet exposure. Further investigation of the page content is warranted, but the current evidence is sufficient to treat the domain as a confirmed phishing threat.