sp13ct-lormor-biz-frandik-zavsel.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sp13ct-lormor-biz-frandik-zavsel.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface, including Facebook branding, a login form, and Meta-related footer links. The page title is "Facebook," and the screenshot shows a layout that imitates a mainstream social media sign-in page rather than presenting an independent brand or service of its own.
Based on the domain structure, the site is hosted on a pages.dev subdomain associated with a cloud hosting platform rather than on Facebook's official domain infrastructure. That combination suggests the page may be intended to collect user credentials or redirect visitors through an appeal or account-related workflow while presenting itself as a familiar social media login experience.
Safety Assessment for sp13ct-lormor-biz-frandik-zavsel.pages.dev
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, the visible page closely imitates Facebook's login screen while operating from an unrelated pages.dev subdomain, which may indicate an attempt to mislead visitors into believing they are interacting with the legitimate service.
The malware scan did not identify malicious files during this specific check, and major content-focused threat databases listed in the scan were clean at that moment. However, that cleaner result is outweighed by the multi-engine phishing consensus, the deceptive branding pattern visible in the screenshot, and the fact that the domain's IP address is listed on one mail-reputation blocklist, which adds a minor cautionary signal.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate provider, with expiry shown as 2026-11-02. It is hosted behind Cloudflare infrastructure on IP address 188.114.97.2, with nameservers adi.ns.cloudflare.com and karl.ns.cloudflare.com. The domain itself is several years old, but as a hosted pages.dev subdomain, the age does not necessarily reflect the age or legitimacy of the specific content currently being served.
DNSSEC appears to be unsigned, and the web server software was not identified in the scan output. From a security perspective, the main concern is not the transport configuration but the apparent impersonation of a well-known login page on third-party hosting.
Share your experience with this website. Was it safe? Did you encounter any issues?