9b1u-q9a0x6-7dwi1-di3iy9.pages.dev
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 9b1u-q9a0x6-7dwi1-di3iy9.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface. The page title is "Facebook," the screenshot shows Facebook branding and a sign-in form, and the page includes references to facebook.com alongside an "appeals" submission path. Based on the visible content, it does not appear to be an independent social platform, but rather a page presenting itself as related to Facebook account access or recovery.
The domain itself is a random-looking subdomain under pages.dev, which is a hosted web platform rather than an official Facebook-owned domain. That mismatch between the displayed brand and the actual hostname is notable. Based on the available page content and classification data, this site appears to be associated with social-media-themed credential collection or account-related fraud rather than a legitimate branded login portal.
Safety Assessment for 9b1u-q9a0x6-7dwi1-di3iy9.pages.dev
Multiple security signals raise concern at the time of this scan. The domain was flagged by 9 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related content. The screenshot also shows a login page visually imitating Facebook while using a non-Facebook pages.dev subdomain, which may indicate an attempt to collect account credentials from visitors who believe they are on the official service.
The malware file scan did not detect malicious files at the time of analysis, and major content-malware blacklist checks shown here were otherwise clean. However, a clean file scan does not rule out credential phishing, and the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal rather than conclusive evidence by itself. In this case, the stronger indicators are the multi-engine phishing detections, the phishing/fraud categorization, and the visible brand imitation.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry listed as 2026-11-16. It is hosted behind Cloudflare infrastructure on IP address 172.66.47.70, and the registrar is CloudFlare, Inc. The domain has been registered for several years, which can sometimes lend legitimacy to infrastructure but does not by itself reduce phishing risk when page content and reputation signals are negative.
DNSSEC appears to be unsigned, and the web server software was not identified in the scan data. The use of a hosted pages.dev subdomain with a random-looking label, combined with branding that appears to imitate a major social-media platform, is a more relevant concern here than the TLS setup itself.
Share your experience with this website. Was it safe? Did you encounter any issues?