mantle-1761339114676-mpahmlbo.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of mantle-1761339114676-mpahmlbo.pages[.]dev
This domain appears to be a page hosted on the pages.dev platform, which is commonly used for static websites and temporary deployments. Based on the screenshot and page title, the content is presenting itself as a Facebook login page, including Facebook branding, a login form, and Meta references in the footer.
The domain name itself does not appear to be an official Facebook or Meta-owned web address. Instead, it uses an autogenerated-looking subdomain under a generic hosting platform, which may indicate a custom deployment rather than an official service endpoint. In practical terms, the page appears designed to collect login credentials from users expecting to access Facebook.
Safety Assessment for mantle-1761339114676-mpahmlbo.pages[.]dev
The scan results show mixed signals. A malware scan reported no flagged files and several blacklist databases did not list the domain at the time of this scan. However, 2 out of 91 security engines flagged the page for phishing, which is a meaningful concern given the visible content.
The strongest risk indicator is the mismatch between the domain and the brand being displayed. The page closely imitates Facebook's login interface, but it is hosted on a pages.dev subdomain rather than an official Facebook or Meta domain. That kind of brand mismatch may indicate an attempt to capture account credentials or impersonate a legitimate login portal.
Based on the screenshot, domain context, and available scan data, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate and is hosted behind Cloudflare infrastructure on IP address 172.66.45.44. The certificate status appears valid at the time of the scan, which helps encrypt traffic in transit but does not by itself establish legitimacy. DNSSEC appears to be unsigned.
The domain has been registered for several years, but the active content is hosted as a subdomain on a shared pages.dev platform, which can be used for both legitimate and abusive deployments. No malicious files, external links, or iframes were identified in the provided scan data, but the page's apparent impersonation of a major social platform remains the primary security concern.
Share your experience with this website. Was it safe? Did you encounter any issues?