securefirmportal.vercel.app
Category: Webmail
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of securefirmportal.vercel.app
This website appears to be a login portal branded as "Secure Firm Portal," with page elements referencing "Authentication Technical Support Firm Portal" and an "AppSuite client" sign-in form. Based on the visible content and URL structure, it may be intended to provide account access, password reset, registration, and policy pages for users of a business or support-related web portal.
The site is hosted on a vercel.app subdomain rather than a standalone primary business domain, while also referencing securefirmportal.com in its linked resources. Its categories from web-classification sources suggest a mix of webmail, information technology, and spam-related labeling, which may indicate either a business portal with messaging functions or a site that has drawn mixed reputation assessments.
No clear operator identity is visible from the provided screenshot or metadata, and the homepage appears minimal, centered mainly on credential entry. That limited branding and sparse public-facing information can make it harder to independently verify who runs the service based on available data.
Safety Assessment for securefirmportal.vercel.app
Scan results are mixed at the time of this scan. The site was flagged by 2 security engines, with detections related to phishing and spam, while the malware scan reported no flagged files and no flagged external links or referenced domains. In addition, major content-malice threat databases listed here did not report the domain as malicious at the time of this scan.
There is, however, a separate cautionary signal: the domain's IP address is listed on one mail-reputation blocklist. That type of listing is generally weaker evidence for website risk than a direct phishing or malware listing, but it can still be relevant when considered alongside the portal-style login page, limited operator transparency, and the small number of security-engine detections.
The domain is several years old, which modestly reduces the likelihood of a throwaway campaign site, but age alone does not verify legitimacy. Because this is a credential-collection style portal on a hosted subdomain and some security engines raised phishing/spam concerns, visitors should verify the site's authenticity through an independent channel before entering account details. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with certificate expiry extending to 2027-01-29. It is hosted on Vercel infrastructure and resolves through Vercel nameservers, with the server IP geolocating to Walnut, United States. The web server is identified as Vercel, and the page loads common frontend libraries such as jQuery and Bootstrap.
DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No malware-positive files, flagged outbound links, or iframes were reported in the provided scan data. The main technical concern is reputational rather than exploit-based: a login-focused page on a hosted subdomain, combined with limited visible organizational identity and a mail-reputation blocklist hit on the IP.
Share your experience with this website. Was it safe? Did you encounter any issues?