facebook-login-page-kappa.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of facebook-login-page-kappa.vercel.app
This domain appears to host a web page designed to resemble a Facebook login screen, showing the Facebook wordmark, email/phone and password fields, and account-related prompts. The page title and metadata indicate a generic Next.js application template rather than an official Facebook property, while the subdomain is hosted under vercel.app, a platform commonly used for quick web deployments.
Based on the domain name and visible content, the site appears intended to collect login credentials by imitating a well-known social media service. It does not appear to represent an official Meta or Facebook domain, and the branding shown on the page may be used in a misleading way. The operator is not clearly identified in the available scan data.
Safety Assessment for facebook-login-page-kappa.vercel.app
Multiple risk indicators were present at the time of this scan. The domain was flagged by 19 out of 91 security engines, with the detections broadly classifying it as phishing or otherwise malicious. In addition, the page visually imitates Facebook's login interface while using a non-official domain, which is a strong sign that it may be attempting to capture user credentials through brand impersonation.
Blacklist and reputation data were mixed but still concerning. Major content-malice databases in the provided scan were largely clean at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist, and one additional blacklist provider returned a generic malicious-object listing. The malware file scan itself did not detect flagged files, but that does not offset the stronger phishing indicators from the page content and multi-engine consensus.
Based on these findings, this website may pose potential risks to visitors, particularly anyone entering account credentials or personal information.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, expiring in 2026-09-26. It is hosted on Vercel infrastructure and resolves to an IP in the United States. The page assets and metadata suggest a Next.js deployment, and the visible resource paths are consistent with a modern JavaScript web application.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer. A valid certificate and reputable hosting platform do not by themselves establish legitimacy; in this case, the main technical concern is that a cloud-hosted deployment appears to be presenting a login page that imitates a major brand on an unrelated domain.
Share your experience with this website. Was it safe? Did you encounter any issues?