phantom-eight-nu.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of phantom-eight-nu.vercel.app
This website appears to be a login page hosted on the vercel.app platform and branded as “Phantom.” The page title and visible interface suggest it is presenting itself as a sign-in portal for a Phantom-related analytics dashboard, with fields requesting an email address and password. The design is minimal and focused entirely on credential entry rather than on broader product information or navigation.
Based on the domain structure, this is not the primary phantom.app domain but a subdomain under Vercel’s hosting infrastructure. That setup may indicate a temporary deployment, preview site, or independently published page rather than an official production property. Given the branding, metadata, and categories assigned by multiple web-classification providers, the page appears intended to imitate or closely resemble a Phantom-associated login experience.
Safety Assessment for phantom-eight-nu.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 10 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator of credential-harvesting or deceptive login behavior.
The domain also closely resembles phantom.app and may be a look-alike intended to benefit from user confusion. That concern is reinforced by the screenshot, which shows a branded sign-in form asking for email and password on a Vercel subdomain rather than on the expected primary domain. Although the malware scan did not detect malicious files at the time of analysis, phishing pages often contain little or no malware and instead rely on deceptive branding and credential collection.
A secondary caution is that the domain’s IP address is listed on one mail-reputation blocklist, though that signal alone is weaker than the phishing detections and social-engineering listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted by Vercel, Inc. on IP address 216.198.79.131 and uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026. The presence of HTTPS indicates encrypted transport, but encryption alone does not verify that the page is legitimate. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer.
The page appears to be built with a modern JavaScript framework, likely using bundled Next.js-style static assets served from the same host. No malicious files were flagged in the limited file scan, and no suspicious external links or iframes were identified in the provided crawl data. The main technical concern is therefore not malware delivery but the apparent use of a hosted subdomain and brand-like presentation consistent with a phishing-style credential collection page.
Share your experience with this website. Was it safe? Did you encounter any issues?