h-d-f-c.vercel.app
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of h-d-f-c.vercel.app
This website appears to present itself as an HDFC Bank credit card portal, promoting services such as credit limit upgrades, new card applications, and card-to-card transfers. The page title and visible branding reference HDFC Bank, and the content is framed as a financial-services landing page aimed at credit card customers in India.
However, the domain itself is a subdomain hosted on vercel.app rather than an official bank-owned domain. Based on the domain structure, page metadata, and screenshot, the site may be attempting to mimic a banking or card-services portal rather than operating as an official financial institution website. The hosting setup suggests it is deployed as a web app or static site on a cloud platform rather than through a dedicated branded banking domain.
Safety Assessment for h-d-f-c.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 10 out of 91 security engines, and several web-classification sources categorized it as phishing, fraud, or related deceptive activity. The page also closely resembles HDFC Bank branding while using an unrelated vercel.app subdomain, which may indicate a look-alike site intended to imitate a legitimate financial brand.
Although the malware scan did not detect malicious files in the sampled page resources, that does not offset the stronger phishing-related indicators. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. The combination of multi-engine phishing detections, financial-brand presentation, and non-official hosting materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.131 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry listed as 2026-09-26. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
From a web-stack perspective, the page appears to be built with a modern JavaScript framework and serves static Next.js-style assets from the same host. No malicious files were flagged in the sampled resources, but the main technical concern is not transport security; it is the mismatch between the banking-themed content and the non-official hosted subdomain, alongside phishing-related detections from multiple security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?