global-mail.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of global-mail.vercel.app
The domain global-mail.vercel.app appears to host a simple web login page presented as an email or mailbox access portal. The screenshot shows a minimal sign-in form with fields for email and password, Chinese-language interface text, and very little supporting branding or explanatory content. There is no visible company identification, service description, or standard navigation that would normally help users verify who operates the page.
Based on the hostname structure, this page is deployed as a subdomain on Vercel's app-hosting platform rather than on a standalone branded domain. That setup can be used for legitimate prototypes and web apps, but it is also commonly used for disposable landing pages. In this case, the page appears to be focused solely on collecting login credentials rather than providing a broader email service experience.
Safety Assessment for global-mail.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, a major threat database listed the URL for social-engineering activity, and another blacklist source also returned a malicious-style listing. The screenshot further shows a generic credential-entry form with no clear operator identity, which is consistent with pages that may be used to harvest account logins.
One weaker signal in the opposite direction is that a malware scan of the page files did not detect malicious code at the time of analysis. However, phishing pages often rely on deceptive forms rather than downloadable malware, so a clean file scan does not materially offset the broader phishing indicators here. The domain's IP address is also listed on one mail-reputation blocklist, which is a secondary cautionary signal rather than primary evidence about website content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026. It is hosted on Vercel infrastructure and resolves to an IP address in the United States. The domain is a Vercel app subdomain rather than an independently branded primary domain, which can make operator attribution less transparent.
WHOIS data indicates the parent domain has been in existence for several years, but that age does not by itself validate the specific hosted page. DNSSEC appears to be unsigned, and the scan did not provide a confirmed TLS protocol version. No malicious files were flagged in the limited page scan, but the main concern here appears to be credential phishing behavior rather than exploit delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?