qelquro-nqx-belxeta-p8t4hk23.pages.dev
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of qelquro-nqx-belxeta-p8t4hk23.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface. The page title is "Facebook," the screenshot shows Facebook and Meta branding, and the visible layout imitates a social-media sign-in page with fields for email/mobile number and password.
Based on the domain structure, this is not an official Facebook-owned web address but a subdomain hosted on the pages.dev platform. The presence of paths such as "/appeals/submit-appeal-form/return" and "/send_appeal_request" suggests it may be presented as an account recovery or appeal-related page intended to collect user credentials or other account information.
The site does not appear to represent an independent business, publisher, or service with its own clear identity. Instead, based on the available content and branding cues, it appears to be imitating a well-known social-media platform.
Safety Assessment for qelquro-nqx-belxeta-p8t4hk23.pages.dev
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. The screenshot also shows a login page that closely imitates Facebook while using a non-official pages.dev subdomain, which may indicate an attempt to capture account credentials through brand imitation.
Additional context reinforces that concern. The domain has no meaningful traffic ranking, and while the malware file scan did not detect malicious files, phishing pages often rely on deceptive forms rather than downloadable malware. Blacklist data was mixed at the time of this scan: major content-focused threat databases shown here were clean, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal and not by itself proof of harmful website content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry listed as 2026-11-02. It is hosted behind Cloudflare infrastructure on IP address 172.66.47.117, with nameservers adi.ns.cloudflare.com and karl.ns.cloudflare.com. The domain itself is several years old, but because it is a hosted subdomain on pages.dev, the age of the parent registration does not necessarily reflect how long this specific page has been active.
DNSSEC appears to be unsigned. No malicious files or flagged external links were identified in the provided file-level scan, but that does not materially reduce phishing concerns when the visible page behavior centers on credential entry and brand imitation.
Share your experience with this website. Was it safe? Did you encounter any issues?