e7fonw-3eskv-1nylv3-vcwdw.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of e7fonw-3eskv-1nylv3-vcwdw.pages.dev
This domain appears to host a page that imitates Facebook's login interface. The page title is "Facebook," the screenshot shows Facebook and Meta branding, and the visible content includes a username/password form alongside familiar social-media imagery and footer links intended to resemble the legitimate platform.
The domain itself is a random-looking subdomain under pages.dev rather than an official Facebook or Meta-owned web address. Based on the page layout, branding, and the presence of an appeal-related submission path in the discovered URLs, the site appears to be designed to collect account credentials or other user-submitted information while presenting itself as a Facebook-related login or account-recovery page.
The site appears to be delivered through a static hosting platform and does not present signs of being a normal independent business, media outlet, or community website. Based on available content, it is more accurately described as a social-media look-alike page that may be attempting to impersonate Facebook.
Safety Assessment for e7fonw-3eskv-1nylv3-vcwdw.pages.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator that the page may be intended to trick visitors into entering sensitive account information.
The page content also raises concern because it closely imitates Facebook's branding and login experience while using an unrelated pages.dev subdomain rather than an official Facebook or Meta domain. That kind of mismatch may indicate a look-alike page intended to capture credentials. Although one malware scan reported no flagged files and several other blacklist providers were clean, those cleaner results do not outweigh the combination of multi-engine phishing detections, the social-engineering listing, and the visible impersonation pattern.
The domain's IP address is also listed on one mail-reputation blocklist, though that signal is weaker than the phishing-related findings and may reflect broader hosting or reputation issues rather than website content alone. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in October 2026. It is hosted behind Cloudflare infrastructure on IP address 172.66.44.60, with Cloudflare nameservers and a pages.dev subdomain, which is consistent with deployment on a hosted static-pages platform. The exact web server software and protocol details were not identified in the scan data.
DNSSEC appears to be unsigned. The domain has existed for several years, but age alone does not reduce the concern created by the page's apparent Facebook impersonation and the phishing detections. Technically, the site appears reachable and properly encrypted, but valid HTTPS should not be interpreted as proof of legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?