sp4ct-narvexo-biz8-furem-kolan.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sp4ct-narvexo-biz8-furem-kolan.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface. The page title is "Facebook," the screenshot shows Facebook and Meta branding, and the visible content includes a username/password form alongside links such as "Forgot password?" and "Create new account." Based on the page structure and branding, it appears intended to imitate a social media account sign-in page rather than present an independent service of its own.
The site is hosted on a pages.dev subdomain, which suggests it may be deployed through a static hosting platform rather than operated from an official Facebook or Meta-owned domain. The domain name itself is a long, random-looking string that does not match the expected naming pattern of the brand shown on the page. Based on available content and classifications, this website appears to fall into the phishing or credential-harvesting category.
Safety Assessment for sp4ct-narvexo-biz8-furem-kolan.pages.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 18 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The screenshot also shows a login page visually presenting itself as Facebook while being hosted on an unrelated pages.dev subdomain, which may indicate an attempt to collect account credentials by imitating a well-known service.
Blacklist and reputation data were mixed rather than fully clean. Major content-malice databases in the provided scan data did not report a listing at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist. That DNS-based listing is a weaker signal than direct phishing detections, yet it still adds a small amount of caution. The page's use of Facebook branding on a non-official domain is a more significant concern than the DNSBL result.
Taken together, the branding mismatch, phishing-oriented classifications, and multi-engine detections suggest this website may pose potential risks to visitors, especially if credentials are entered. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presented a valid SSL/TLS certificate issued by Google Trust Services, with an expiry date of 2026-10-19. A valid certificate helps encrypt traffic in transit, but it does not verify that the page is legitimately affiliated with the brand it displays. The domain is hosted behind Cloudflare infrastructure, with the reported server IP resolving to 188.114.97.2 in Toronto, Canada.
WHOIS-style data indicates the subdomain's parent domain has existed for several years, but registrar, nameserver, protocol, web server, and DNSSEC details were not available in the provided scan. No malicious files or flagged external links were identified by the malware scan component, which may suggest the page relies more on deceptive content and credential collection than on downloadable malware.
Share your experience with this website. Was it safe? Did you encounter any issues?