shp-entregas.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of shp-entregas.vercel.app
This website appears to present itself as a recruitment or onboarding page for delivery drivers associated with Shopee. The page title, branding, and Portuguese-language text suggest it is aimed at users interested in becoming a "Motorista Parceiro" or delivery partner, with promotional messaging about registering, receiving orders, making deliveries, and earning money.
Based on the visible content, the site includes Shopee-themed imagery, a video section explaining how deliveries work, and a payment-related path in its linked resources. It is hosted on a vercel.app subdomain rather than on an apparent official Shopee-owned domain, which may indicate it is an independently deployed landing page rather than a primary corporate property.
The operator is not clearly identified in the provided scan data. While the page uses Shopee branding and references delivery work, the available information does not confirm that it is officially operated by Shopee or an authorized partner.
Safety Assessment for shp-entregas.vercel.app
This domain was flagged by 16 out of 90 security engines at the time of the scan, with the detections largely classifying it as phishing or otherwise malicious. In addition, one phishing-focused threat database listed the domain, which is a stronger warning sign than a generic heuristic alone. The page content also appears to use Shopee branding while being hosted on a third-party subdomain, which may indicate brand imitation or credential/payment harvesting risk.
The malware scan did not report confirmed malicious files, but it did attach a generic suspicious label to the domain and several linked resources. That kind of heuristic finding is lower confidence on its own; however, in this case it is accompanied by broad multi-engine phishing detections, which materially increases concern. The domain's IP address was also listed on one mail-reputation blocklist, though that signal is secondary and does not by itself prove harmful website content.
The domain is several years old and uses valid HTTPS, but those factors do not outweigh the phishing-related detections and the apparent use of a major brand on an unofficial hosting platform. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.195, with nameservers under vercel-dns-3.com. It presents a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-11-27. DNSSEC appears to be unsigned at the time of the scan.
From a technical standpoint, the use of HTTPS means traffic may be encrypted in transit, but encryption alone does not establish legitimacy. The scan data also shows a payment-related URL path and multiple internally hosted assets marked with a generic suspicious heuristic, alongside one DNS-based mail-reputation listing for the IP. No confirmed malicious files were identified in the file scan, but the broader reputation signals remain concerning.
Share your experience with this website. Was it safe? Did you encounter any issues?