postfinance-two.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of postfinance-two.vercel.app
This domain appears to host a web page presenting itself as a PostFinance e-finance login portal. The page title, branding, and French-language interface suggest it is imitating an online banking sign-in experience, including account access prompts, password fields, and a QR-based login option.
Based on the domain structure, this is a subdomain hosted on Vercel rather than an apparent official PostFinance-owned banking domain. The content is focused on financial account access and references an 80 CHF reimbursement in the metadata, which may be intended to encourage user interaction. The site appears to target French-speaking users seeking online banking services.
Safety Assessment for postfinance-two.vercel.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator of credential-harvesting or deceptive login behavior.
The page content also raises concern because it appears to mimic the branding and login flow of PostFinance while operating from a third-party hosting subdomain rather than what would typically be expected for an official banking login portal. That kind of brand resemblance may be consistent with a look-alike financial phishing page designed to collect usernames, passwords, or other account details.
A malware file scan did not detect malicious files in the small set of scanned assets, but that does not offset the stronger phishing-related signals above. The domain's IP address is also listed on one mail-reputation blocklist, though that is a secondary signal compared with the phishing detections. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026. It is hosted on Vercel infrastructure and resolves to an IP in the United States. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
From a hosting perspective, the use of a cloud app platform and HTTPS does not by itself establish legitimacy. In this case, the more notable technical concern is that a banking-themed login page is being served from a Vercel subdomain rather than an apparent official financial institution domain, which may be inconsistent with expected deployment practices for a genuine banking portal.
Share your experience with this website. Was it safe? Did you encounter any issues?