incolight.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of incolight.vercel.app
The domain incolight.vercel.app appears to be a page hosted on a cloud application platform rather than a standalone branded website. Based on the screenshot, it presents itself as an "Adobe Reader PDF Viewer" page offering access to a "Shared Document" and prompting the visitor to enter an access code to continue. The visible content suggests a document-delivery or document-access workflow rather than a conventional business, media, or informational site.
No clear operator identity is visible in the provided page content, and the subdomain naming does not strongly indicate an established organization or recognized service. The use of a hosted subdomain on a general-purpose deployment platform may be legitimate in some cases, but in this instance the page branding and document-access theme resemble pages commonly used to solicit credentials or other user input under the appearance of a trusted document service.
Safety Assessment for incolight.vercel.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was categorized by several web-classification providers as phishing or fraud-related, and 17 out of 91 security engines flagged it. In addition, the screenshot shows a document-themed interface styled to resemble a well-known PDF product, with prompts such as "verification required" and "re-enter the access code," which may be consistent with credential-harvesting or social-engineering tactics.
The malware scan did not detect malicious files in the limited content it checked, and major content-focused threat databases listed in the scan were clean at that moment. However, that cleaner result is outweighed here by the broad phishing consensus across security engines and the deceptive-looking page presentation. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds a small amount of caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown as 2026-09-26. It is hosted on Vercel infrastructure, resolves to IP address 216.198.79.131, and uses Vercel nameservers. DNSSEC appears to be unsigned.
From a technical standpoint, the presence of HTTPS only indicates encrypted transport and does not by itself establish legitimacy. The combination of cloud-hosted infrastructure, a generic hosted subdomain, and a page that imitates a document-access workflow may make rapid deployment and replacement easier, which is often seen in short-lived phishing operations.
Share your experience with this website. Was it safe? Did you encounter any issues?