my-swisscomm.vercel.app
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of my-swisscomm.vercel.app
The domain "my-swisscomm.vercel.app" is hosted on Vercel's free application-hosting platform, using a subdomain rather than a standalone registered domain. The page presents itself as a "Swisscom Login" portal, mimicking the branding, layout, and service list (My Swisscom, Webmail, myCloud, blue TV, Community, myAI, My Security) of Swisscom, the major Swiss telecommunications provider.
Based on the page content and naming pattern, this site does not appear to be operated by Swisscom or any of its authorized affiliates. Instead, it closely imitates Swisscom's official login interface, including logo, color scheme, and terminology, while being hosted on a generic third-party app platform rather than Swisscom's own infrastructure. This is a common pattern used to trick visitors into submitting their account credentials.
The use of a free hosting subdomain combined with an extra "m" in "swisscomm" and a login form requesting usernames/emails strongly suggests this page was created to harvest Swisscom customer credentials rather than to provide any legitimate telecommunications service.
Safety Assessment for my-swisscomm.vercel.app
This domain was flagged as phishing by 19 out of 91 security engines at the time of this scan, with several engines explicitly identifying it as impersonating a legitimate login service. It is also listed on at least one phishing-focused blacklist database, and the domain's IP address is listed on one mail-reputation blocklist (SURBL), which is a secondary signal typically tied to spam/IP reputation rather than site content directly. A generic heuristic malware scanner flagged an associated object as suspicious, though it did not identify a specific malware family.
The page content itself - a near-exact replica of a "Swisscom Login" interface hosted on a free app-deployment subdomain rather than Swisscom's official domain - is consistent with the classic pattern of credential-harvesting phishing pages. The domain name "my-swisscomm.vercel.app" closely resembles the legitimate Swisscom brand and its "My Swisscom" service portal, and this resemblance, combined with the multi-engine phishing consensus, strongly supports concerns about brand impersonation and credential theft.
Based on these findings, this website may pose potential risks to visitors, particularly anyone who enters login credentials believing they are accessing genuine Swisscom services. Visitors should avoid entering personal or account information on this page.
Technical Description
The site is served over HTTPS with a valid SSL certificate issued by Google Trust Services, hosted on Vercel's infrastructure (server IP 216.198.79.195, located in the United States) rather than on any infrastructure associated with Swisscom. DNSSEC is not enabled on the parent vercel.app zone as seen here, and the site relies on Vercel's own nameservers, consistent with a project deployed on a free/low-cost hosting tier rather than a dedicated corporate domain.
The underlying "vercel.app" parent domain itself is long-established (registered in 2020), but this reflects the age of Vercel's platform domain, not the age or legitimacy of this specific phishing subdomain, which can be created and torn down quickly on such shared hosting platforms. No iframes were detected, and only a small number of external resources (Google Fonts) and one flagged internal asset were observed.
Share your experience with this website. Was it safe? Did you encounter any issues?