vormela-kxt-felrani-r5t9hq72.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of vormela-kxt-felrani-r5t9hq72.pages.dev
This domain appears to be a subdomain hosted on the pages.dev platform, which is commonly used to publish static websites through Cloudflare's hosting infrastructure. The hostname itself is randomly structured and does not clearly identify a business, organization, or public-facing brand, which can make it difficult to determine the site's intended purpose from the domain name alone.
Based on the available scan context, the site does not present clear organizational identity details, and it appears to rely on Cloudflare-managed infrastructure for delivery and protection. The domain has existed for several years as a pages.dev property, but the naming pattern and lack of recognizable branding suggest it may be a temporary or disposable web deployment rather than an established standalone website.
Safety Assessment for vormela-kxt-felrani-r5t9hq72.pages.dev
Multiple security engines flagged this domain as phishing at the time of the scan, with 9 out of 91 engines reporting malicious phishing-related detections. That level of multi-engine agreement is a meaningful warning sign, especially for a site with no established traffic ranking and a non-descriptive, randomly generated-looking subdomain. Although one malware scan reported no flagged files, file-level cleanliness does not rule out phishing behavior, which often depends more on page content, forms, and social-engineering tactics than on downloadable malware.
Blacklist data was mixed at the time of the scan. Major content-focused threat databases in the provided results did not report a listing, but the domain's IP address was listed on one mail-reputation blocklist. That type of listing is a weaker signal than direct phishing detections, yet it still adds some caution and means the reputation picture was not fully clean.
Taken together, the phishing classifications from multiple security engines outweigh the clean file scan and limited blacklist findings. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services, with expiry shown as 2026-11-14. It is served through Cloudflare infrastructure on IP address 172.66.47.176, with Cloudflare identified as both hosting provider and web server layer. The domain uses Cloudflare nameservers and is registered through CloudFlare, Inc.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation. The scan context suggests the page is operating behind Cloudflare-managed services, and the referenced resources include Cloudflare error and challenge components. While the TLS setup appears valid, transport security alone should not be treated as evidence of legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?