2025-beta.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 2025-beta.vercel.app
The domain 2025-beta.vercel.app appears to host a web page presented as a personal internet-banking login portal branded "BHD | Personal." The screenshot shows a Spanish-language username and password form, a password-recovery prompt, and a link referencing business internet banking, suggesting that the page is attempting to resemble an online banking access point.
Based on the subdomain structure, this page is hosted on Vercel's app platform rather than on a dedicated brand-owned banking domain. The title "BHD - IBP" and the visible branding indicate that the page may be targeting users of a financial institution or attempting to imitate one, but the available scan data does not identify the operator with certainty.
Safety Assessment for 2025-beta.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 11 out of 91 security engines, with the detections largely classifying it as phishing or malicious. In addition, a major threat-database listing marked the page for social-engineering activity, and another blacklist source returned a generic malicious-object listing. Although the file-level malware scan did not detect malicious payloads in the sampled files, phishing pages often rely on deceptive forms rather than downloadable malware, so a clean file scan does not materially offset the broader reputation findings.
The page content itself also raises concern: it appears to imitate a banking login experience while operating from a generic hosting subdomain rather than an apparent official banking domain. That mismatch may indicate credential-harvesting intent or other deceptive use. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting as a minor caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and it is hosted on Vercel infrastructure with the web server identified as Vercel. The certificate validity indicates encrypted transport was available at the time of testing, but HTTPS alone does not verify that the page is legitimate or trustworthy.
DNSSEC appears to be unsigned, and the site is served from a Vercel-hosted IP in the United States using Vercel-managed nameservers. No malicious files were flagged in the limited file scan, but the stronger concern here is apparent phishing-style page behavior and multi-engine reputation detections rather than exploit code or malware binaries.
Share your experience with this website. Was it safe? Did you encounter any issues?