canpoly.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of canpoly.vercel.app
The domain canpoly.vercel.app appears to be a page hosted on Vercel's app platform rather than a standalone corporate website. Based on the page title and screenshot, it presents itself as a Microsoft OneDrive-style document sharing page, claiming that a user has shared a file titled “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” and prompting the visitor to sign in with a Microsoft account.
The visible content imitates a cloud-document access workflow, including Microsoft branding cues, a document card, a verification code, and a sign-in button. There is no clear indication on the page that it is officially operated by Microsoft, and the use of a third-party subdomain on vercel.app suggests it may be a custom-hosted page created by an unrelated party.
Based on the available content and classification data, this page appears to function as a credential-harvesting or phishing-style login lure rather than a legitimate productivity or file-sharing service.
Safety Assessment for canpoly.vercel.app
This website shows multiple indicators commonly associated with phishing at the time of this scan. It was flagged by 16 out of 91 security engines, and multiple web-classification sources categorized it as phishing. The page content also appears to imitate a Microsoft OneDrive document-sharing prompt while being hosted on a vercel.app subdomain, which may indicate an attempt to make visitors believe they are interacting with a Microsoft-operated login flow when they are not.
Although the malware scan did not detect malicious files and several content-focused blacklist databases were clean at the time of this scan, those signals do not outweigh the stronger phishing indicators in this case. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds a small amount of caution. The screenshot's use of Microsoft-themed branding, a shared-document pretext, and a sign-in prompt are consistent with credential theft patterns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.195 in Walnut, United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, expiring on 2026-11-26. A valid certificate indicates encrypted transport, but it does not by itself confirm the legitimacy of the page or its operator.
The domain record indicates an age of about 6 years, with DNS hosted on Vercel nameservers. DNSSEC appears to be unsigned. The combination of a cloud-hosted subdomain, Microsoft-themed page content, and phishing-related detections suggests the main concern is social-engineering abuse rather than exploit delivery or malware hosting based on the available scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?