sp11ct-horlin-biz8-cravex-norzil.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sp11ct-horlin-biz8-cravex-norzil.pages.dev
This domain appears to be hosted on the pages.dev platform, which is commonly used to publish static websites through Cloudflare infrastructure. Based on the page title, screenshot, and visible interface elements, the site is presenting itself as a Facebook login page, including Meta branding, a familiar sign-in form, and layout elements associated with the social media platform.
The domain name itself does not appear to be an official Facebook or Meta web address, and it uses a long, random-looking subdomain rather than a branded domain structure. The presence of paths such as appeal and submit-appeal-form suggests the page may be designed to collect account credentials or other user-submitted information while imitating a legitimate service.
Based on the available content and branding cues, this page appears to be impersonating a major social media platform rather than operating as an independent website with its own identity.
Safety Assessment for sp11ct-horlin-biz8-cravex-norzil.pages.dev
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 18 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, one phishing-focused threat database listed the domain, and the page screenshot shows a login form visually resembling Facebook while being hosted on an unrelated pages.dev subdomain. That combination is commonly associated with credential-harvesting activity.
Although one malware scan reported no directly flagged files, it still noted generic suspicious indicators tied to the domain and several internal resources. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own, but it adds a small amount of caution when considered alongside the stronger phishing-related detections. The site is also not ranked in major traffic data, which may be consistent with a low-visibility or short-lived campaign page.
Based on these findings, this website may pose potential risks to visitors. Users should be especially cautious about entering login credentials or personal information on this page.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and the certificate was valid until 2026-10-26 at the time of this scan. It is hosted behind Cloudflare infrastructure on IP address 172.66.47.41, with Cloudflare nameservers and a registrar record through CloudFlare, Inc. DNSSEC appears to be unsigned.
From an infrastructure perspective, the use of a reputable CDN and valid TLS does not by itself establish legitimacy, since phishing pages frequently use mainstream hosting and encryption. The main technical concern here is not the certificate or hosting stack, but the mismatch between the unbranded pages.dev subdomain and the Facebook-themed login interface, along with suspicious internal paths and broad phishing detections from security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?