kxlrq170nhw-fghzdfyn-3y8x0g-wp611a.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of kxlrq170nhw-fghzdfyn-3y8x0g-wp611a.pages.dev
This domain appears to be hosted on the pages.dev platform, which is commonly used for static sites and web app deployments. The page title and screenshot indicate that it presents itself as a Facebook login page, including Meta branding, a username/password form, and visual elements resembling Facebook's standard sign-in interface.
Based on the domain structure, this does not appear to be an official Facebook or Meta-owned login domain. Instead, it appears to be a custom subdomain on a cloud hosting platform that is displaying a social-media login experience. That combination may indicate a third-party page attempting to collect account credentials while imitating a well-known service.
Safety Assessment for kxlrq170nhw-fghzdfyn-3y8x0g-wp611a.pages.dev
Multiple security signals raise concern here. At the time of this scan, 13 out of 90 security engines flagged the URL for phishing or fraud-related activity, and several web-classification sources also categorized it as phishing-related. The screenshot further shows a login page styled to resemble Facebook, while the actual domain is an unrelated pages.dev subdomain rather than an official Facebook or Meta web address. This kind of mismatch may indicate an attempt to imitate a trusted brand.
The malware scan did not detect malicious files, and major content-focused threat databases were clean at the time of this scan. However, that does not outweigh the stronger phishing indicators from multiple security engines and the visible brand imitation pattern on the page itself. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate provider, with expiry shown as 2026-11-30. It is hosted through Cloudflare infrastructure on IP address 188.114.96.0, with Cloudflare nameservers and a registrar also associated with Cloudflare. DNSSEC appears to be unsigned.
From a technical standpoint, the presence of HTTPS only indicates encrypted transport and should not be treated as proof of legitimacy. The use of a cloud-hosted pages.dev subdomain, combined with a login form imitating a major social platform, may make the page easier to deploy and rotate if used for credential harvesting.
Share your experience with this website. Was it safe? Did you encounter any issues?