bervani-gld-zarqumi-r2x6hz83.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of bervani-gld-zarqumi-r2x6hz83.pages.dev
This domain appears to be hosted on the pages.dev platform, which is commonly used for static sites and lightweight web applications delivered through Cloudflare infrastructure. The page title and screenshot indicate that it is presenting itself as a Facebook login page, including branding elements associated with Meta and a sign-in form requesting an email/mobile number and password.
Based on the visible content, the site does not appear to represent an independent business or informational service of its own. Instead, it appears to imitate the look and structure of Facebook's authentication page, including account-access and appeal-related paths in the listed URLs. The operator is not identified on the page, and the domain name itself does not appear to match Facebook's official web properties.
Safety Assessment for bervani-gld-zarqumi-r2x6hz83.pages.dev
Several security signals raise concern at the time of this scan. The domain was flagged as phishing by 6 out of 91 security engines, and the page visually resembles a Facebook login screen while being hosted on an unrelated pages.dev subdomain. That mismatch between the displayed brand and the actual domain may indicate a look-alike page intended to collect account credentials or other sensitive information.
Additional context is mixed but still cautionary. A malware scan did not identify malicious files at the time of analysis, and major content-malware threat databases listed here were largely clean; however, the domain's IP address is listed on one mail-reputation blocklist, and one blacklist source also marked the site with a generic malicious-object classification. Those signals are weaker than direct phishing detections, but they add to the overall risk picture rather than offsetting it.
Given the combination of multi-engine phishing detections, brand imitation, and a credential-entry interface on a non-official domain, this website may pose potential risks to visitors at the time of this scan.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, expiring on 2026-09-29. It is hosted behind Cloudflare infrastructure on IP address 188.114.97.2, with Cloudflare nameservers and registrar services. The underlying web server software was not identified in the scan output.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation. The domain itself is several years old, but because it is a pages.dev subdomain on a shared hosting platform, age alone does not materially reduce risk when the visible content appears to imitate a major login portal.
Share your experience with this website. Was it safe? Did you encounter any issues?