btrzp63skrp-xjnshhb-2c1f8d-btq99c.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of btrzp63skrp-xjnshhb-2c1f8d-btq99c.pages.dev
This domain appears to be a page hosted on the pages.dev platform, which is commonly used for static websites and web app deployments. Based on the page title, screenshot, and URL structure, the content is presenting itself as a Facebook login page and includes branding associated with Meta's social media platform.
The domain name itself is a long, random-looking subdomain rather than an official Facebook or Meta web address. The page also includes account-login fields and an appeal-related path structure, which may indicate an attempt to collect credentials or personal information while resembling a well-known social media service. Based on the available content, it does not appear to be an independently branded business or informational website operated under its own identity.
Safety Assessment for btrzp63skrp-xjnshhb-2c1f8d-btq99c.pages.dev
Multiple security signals raise concerns about this page at the time of this scan. It was flagged by 9 out of 91 security engines, with the detections broadly classifying it as phishing. In addition, the screenshot shows a login page using Facebook and Meta branding while being hosted on an unrelated pages.dev subdomain, which closely resembles an attempt to imitate a well-known social media service rather than using that service's official domain.
Other scan results were mixed. A malware file scan did not detect malicious files at the time of analysis, and major content-focused threat databases listed in the scan were otherwise clean. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. The combination of multi-engine phishing detections, the off-brand hosting location, and the visible imitation of a major login page materially increases risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted behind Cloudflare infrastructure on IP address 172.66.47.59 and uses a valid TLS certificate issued by Google Trust Services, expiring in October 2026. DNSSEC appears to be unsigned, and the web server software was not identified in the scan results. The domain itself has existed for several years, but because this is a pages.dev subdomain, the age of the parent registration does not necessarily indicate long-term legitimacy for the specific hosted page.
From a technical perspective, the main concern is not certificate validity but contextual misuse: a random-looking subdomain serving a page that visually imitates a Facebook login flow. The presence of an appeal submission path and credential fields on non-official infrastructure may be consistent with credential-harvesting behavior.
Share your experience with this website. Was it safe? Did you encounter any issues?