xelvani-gld-zormela-r4x6hz81.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xelvani-gld-zormela-r4x6hz81.pages.dev
This domain appears to host a page designed to resemble Facebook's login interface, including Facebook branding, a Meta footer, and a sign-in form requesting an email/mobile number and password. The page title is also set to "Facebook," and the visible content suggests an attempt to imitate a mainstream social media login experience rather than present an independent brand or service.
The domain itself is a randomized subdomain under pages.dev, which is a static hosting platform commonly used for legitimate projects but can also be used to publish temporary or disposable pages. Based on the screenshot and URL structure, this page does not appear to represent an official Facebook or Meta-owned domain, and it may have been created to collect account credentials or related user information.
Safety Assessment for xelvani-gld-zormela-r4x6hz81.pages.dev
Several risk indicators are present at the time of this scan. The domain was flagged by 5 out of 91 security engines for phishing-related activity, and an additional blacklist-style check showed one generic malicious listing. While some threat databases did not report issues, the combination of multiple phishing detections and a page that visually imitates Facebook's login screen is a meaningful concern.
The domain also uses a pages.dev subdomain rather than an official Facebook or Meta web property, yet the page title, branding, and login form closely resemble Facebook. That kind of mismatch may indicate a look-alike login page intended to capture credentials. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with certificate expiry listed as 2026-09-29. It is hosted through Cloudflare infrastructure on IP address 188.114.97.0, with Cloudflare nameservers and a pages.dev hosting setup. DNSSEC appears to be unsigned.
From a security perspective, the presence of HTTPS does not by itself establish legitimacy; phishing pages commonly use valid certificates as well. The main technical concern here is not transport security but the apparent mismatch between the hosted domain and the branded login experience it presents.
Share your experience with this website. Was it safe? Did you encounter any issues?