doeusignsafe.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of doeusignsafe.vercel.app
The domain doeusignsafe.vercel.app appears to host a web page designed to resemble a DocuSign sign-in portal. The page title and meta description reference DocuSign account access, document management, and e-signatures, and the screenshot shows a login form branded as DocuSign with third-party sign-in options. Based on the naming pattern, the subdomain combines a misspelled version of the DocuSign brand with the word "safe," which may be intended to appear trustworthy to visitors.
This site is served from a vercel.app subdomain, indicating it is likely deployed through Vercel's hosting platform rather than operated on DocuSign's official domain infrastructure. There is no indication in the provided scan data that this is an official DocuSign-owned property. Based on the available content and branding cues, the page appears to be presenting itself as an account-access page for an electronic signature service.
Safety Assessment for doeusignsafe.vercel.app
Multiple risk indicators were present at the time of this scan. The domain was flagged by 19 out of 91 security engines, with many classifying it as phishing or malicious. In addition, two threat databases listed the domain, while one major browsing blacklist was clean. Although one malware scan reported no flagged files, it also applied a generic malicious classification to the domain and numerous static assets, which is consistent with a suspicious web application rather than a clean reputation profile.
The page content itself raises further concern because it closely imitates a DocuSign login experience while being hosted on an unrelated vercel.app subdomain. That mismatch between branding and domain identity is a common sign of credential-harvesting pages. The very low trust score provided in the scan context also aligns with the broader detection pattern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, with expiry listed as 2026-07-27. It is hosted on Vercel infrastructure and resolves to an IP in the United States. The nameservers are Vercel-managed, and DNSSEC appears to be unsigned. A valid certificate in this context only indicates encrypted transport and should not be treated as proof of legitimacy.
The page appears to be built as a modern JavaScript application, with numerous Next.js static chunks and assets loaded from the same host. Several of those assets were generically flagged during scanning, and the domain is deployed on a shared hosting platform that can be used for both legitimate and abusive content. No iframe activity was reported in the provided scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?