Bem legal mano, olhei o site e a api tá apontando pra um ip local.
Recebi esse erro:
Mixed Content: The page at '' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint ''. This request has been blocked; the content must be served over HTTPS.
Mixed Content: The page at 'https://return-bank-web.vercel.app/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://192.168.0.41:3000/api/auth/login'. This request has been blocked; the content must be served over HTTPS.