msprq08qtw-vnzkt117nx-9b6c2d-hb621a.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of msprq08qtw-vnzkt117nx-9b6c2d-hb621a.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface, including Facebook branding, a Meta footer, and a sign-in form requesting an email/mobile number and password. The page title is also set to "Facebook," which suggests the site is presenting itself as a social-media login portal rather than as an independent service with its own identity.
Based on the domain structure, this page is hosted on a pages.dev subdomain provided through Cloudflare's static hosting platform rather than on Facebook's official domain infrastructure. The long, random-looking subdomain name does not appear consistent with normal consumer-facing branding, and the available content does not indicate that it is operated by Meta or an authorized Facebook property.
Safety Assessment for msprq08qtw-vnzkt117nx-9b6c2d-hb621a.pages.dev
Several security signals indicate elevated risk at the time of this scan. The URL was flagged by 10 out of 91 security engines, with the detections broadly classifying it as phishing. In addition, the visible page closely imitates Facebook's sign-in experience while using an unrelated pages.dev subdomain, which may indicate an attempt to collect account credentials from visitors who believe they are on an official login page.
Other scan components were mixed. A malware scan did not identify malicious files, and major content-focused threat databases listed here did not report the domain at the time of this scan. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still worth noting. Taken together, the combination of multi-engine phishing flags, brand imitation, and credential-entry fields on a non-official domain suggests meaningful risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with hosting routed through Cloudflare infrastructure and an IP address geolocated to Canada. The domain has been registered for several years and uses Cloudflare nameservers, but DNSSEC appears to be unsigned. A valid certificate only indicates encrypted transport and does not by itself confirm legitimacy.
The page appears to be delivered from a Cloudflare Pages environment on a randomized subdomain, which can make rapid deployment easy for both legitimate and abusive content. The scan data did not identify malicious files or flagged outbound links, but the application structure includes login-related and appeal-submission paths that are unusual in the context of a Facebook-branded page hosted outside Facebook's official domain ecosystem.
Share your experience with this website. Was it safe? Did you encounter any issues?