order-request-a-654532.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of order-request-a-654532.vercel.app
This domain appears to be a custom subdomain hosted on Vercel, a cloud platform commonly used to deploy web applications and static sites. The page metadata references "My Files - Sharepoint," and the visible page content shows an "Invalid Link" message stating that a shared link is missing a required email parameter. That presentation suggests the site may be attempting to imitate a document-sharing or file-access workflow.
Based on the domain structure, this does not appear to be an official Microsoft or SharePoint-owned domain. Instead, it appears to be a separately hosted web app using a generic, randomly formatted subdomain name. The combination of a cloud-hosted subdomain, SharePoint-themed branding, and a parameter-driven access flow is consistent with pages that may be used for credential collection or social-engineering campaigns.
Safety Assessment for order-request-a-654532.vercel.app
Scan results indicate substantial risk signals at the time of this scan. The domain was flagged by 17 out of 91 security engines, with multiple detections classifying it as phishing or malicious. In addition, a major threat-database listing identified the page for social-engineering activity, which is a strong content-based warning signal. Although one malware scan reported no directly malicious files, it also attached a generic suspicious label to the domain and many of its linked assets.
The page content adds to the concern. It presents itself as a SharePoint-related file page, but it is hosted on a third-party Vercel subdomain rather than an official SharePoint or Microsoft domain. The screenshot message about a missing email parameter suggests the page may be designed to work only when visited through a crafted link, which is a pattern often associated with targeted phishing flows. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and it is hosted on Vercel infrastructure with the web server identified as Vercel. A valid certificate indicates encrypted transport, but it does not by itself verify the legitimacy of the site's purpose or branding. The domain uses Vercel nameservers and resolves to an IP in the United States.
DNSSEC appears to be unsigned, so DNS responses do not appear to have DNSSEC validation protection. The domain itself is several years old, but because this is a hosted subdomain on a cloud platform, the age of the parent registration does not necessarily reflect how long the current page or campaign has been active.
Share your experience with this website. Was it safe? Did you encounter any issues?