facebook.meweb.kz
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of facebook.meweb.kz
This website appears to present itself as a Facebook login page, using the subdomain facebook.meweb.kz and a page title of "facebook." The screenshot shows a simple sign-in form in Russian with fields for email and password, along with login and registration buttons, and text stating that Facebook helps users stay connected with friends.
Based on the domain structure and page presentation, this does not appear to be an official Facebook-owned domain. Instead, it appears to be a third-party subdomain hosted under meweb.kz. The content and branding suggest that the page may be attempting to imitate a social media login portal rather than operating as an independent service with its own distinct identity.
Safety Assessment for facebook.meweb.kz
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, with many classifying it as phishing or otherwise malicious. In addition, the page visually resembles a Facebook sign-in screen while being hosted on a different domain, which may indicate an attempt to collect user credentials through brand imitation.
Blacklist and reputation data were mixed but still concerning. Major content-malice databases shown in the scan were largely clean at the time of review, but one malware-related blacklist entry was present, and the domain's IP address was also listed on one mail-reputation blocklist. The separate malware scan did not identify infected files, but its generic object detections on the page resources are low-confidence signals and are outweighed here by the broader multi-engine phishing consensus and the deceptive page appearance.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire in October 2026. It appears to be served by an nginx web server from an IP address hosted by PS Internet Company LLC in Almaty, Kazakhstan. DNSSEC status was reported as unknown, and the domain uses nameservers under ps.kz.
From a technical standpoint, the presence of TLS only indicates that traffic may be encrypted in transit and does not validate the legitimacy of the page content. The main concern here is not the certificate itself, but the combination of a login page imitating a major platform, a non-official hosting domain, and substantial phishing detections across security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?