ycgfn25kq-msprq81los-4c1d7a-vn428w.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ycgfn25kq-msprq81los-4c1d7a-vn428w.pages.dev
This domain appears to be hosted on a pages.dev subdomain and presents a login page styled to resemble Facebook. The page title is "Facebook," and the screenshot shows a familiar social-media login layout with Meta branding, account fields, and links that imitate the appearance of an official sign-in page.
Based on the visible content and URL structure, the site does not appear to be an official Facebook or Meta domain. The randomized-looking subdomain name and the presence of paths such as appeal and submit-appeal-form suggest it may be intended to collect account credentials or other user information while presenting itself as a legitimate social platform login page.
Safety Assessment for ycgfn25kq-msprq81los-4c1d7a-vn428w.pages.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 91 security engines, with several classifying it as phishing or malicious. In addition, the page visually imitates Facebook's login interface while using an unrelated pages.dev address, which strongly suggests the site may be attempting to impersonate a well-known service. Although one malware scan did not detect malicious files, that result does not outweigh the broader phishing-related detections and the deceptive page presentation.
Blacklist and threat-database results were mixed at the time of review. Major content-focused threat databases in the provided data did not report a listing, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal on its own. Even so, the combination of multi-engine phishing detections, lack of a recognized traffic profile, and clear brand imitation materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, hosted behind Cloudflare infrastructure on IP address 188.114.97.2, with nameservers also delegated to Cloudflare. The certificate validity indicates encrypted transport was available at the time of this scan, but HTTPS alone does not verify that the page is trustworthy or officially affiliated with the brand it displays.
DNSSEC appears to be unsigned. The domain is several years old, but because this is a hosted subdomain on pages.dev, the age of the parent registration does not necessarily reflect the age or legitimacy of the specific content currently served. The main technical concern is not malware delivery but apparent credential-harvesting behavior through a branded login imitation page.
Share your experience with this website. Was it safe? Did you encounter any issues?