cancelcardiffbahora.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of cancelcardiffbahora.vercel.app
This domain appears to host a Spanish-language page presenting itself as a digital insurance-management or insurance-cancellation service related to Cardiff and Bancolombia. The page title and visible content reference “Seguros Cardiff | Bancolombia,” and the screenshot shows branding associated with Bancolombia and BNP Paribas Cardif, along with calls to manage or cancel an insurance product online.
The site is hosted on a vercel.app subdomain rather than on an apparent official corporate domain for a bank or insurer. Based on the domain string, page metadata, and branding shown in the screenshot, it appears to be targeting users seeking to manage financial or insurance-related services. That combination can be consistent with a promotional microsite, but it can also resemble the kind of setup sometimes used in impersonation or credential-harvesting campaigns.
Safety Assessment for cancelcardiffbahora.vercel.app
This domain was flagged by 18 out of 91 security engines at the time of this scan, with the detections broadly classifying it as phishing or malicious. In addition, the page visually presents banking and insurance branding while operating from a third-party hosting subdomain, which may be inconsistent with how major financial institutions typically publish customer-facing service pages. That mismatch may increase the risk that visitors could mistake it for an official service portal.
The malware file scan did not identify malicious files, and several major threat databases were clean at the time of this scan. However, a clean file scan does not outweigh a strong multi-engine phishing consensus, especially for pages that may rely on social engineering rather than downloadable malware. The domain's IP address was also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and it is hosted on Vercel infrastructure with nameservers pointing to Vercel DNS. The certificate validity indicates encrypted transport is available, but HTTPS alone does not verify that the operator is the legitimate organization represented by the page branding.
DNSSEC appears to be unsigned, which is common but means DNS responses do not appear to have DNSSEC validation protection. The domain is relatively old for a hosted subdomain entry, but because this is a vercel.app subdomain rather than a clearly official bank-owned domain, the hosting context and branding mismatch are more relevant concerns than age alone.
Share your experience with this website. Was it safe? Did you encounter any issues?