bc8.now.sh
Category: Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of bc8.now.sh
The domain bc8.now.sh appears to be a subdomain hosted on Vercel's now.sh infrastructure rather than a standalone branded website. Based on the screenshot, the page presents itself as a "TikTok Bonus" or rewards-style interface showing a large balance and a congratulatory prize message, suggesting it may be designed to entice users with a cash reward or promotional payout.
The available categorization data associates the page with information technology, while multiple classification sources also label it as phishing or fraud-related. There is no clear indication of a legitimate operator, company identity, or official relationship with TikTok visible in the scan data provided, which limits confidence in the site's authenticity and purpose.
Safety Assessment for bc8.now.sh
Several scan signals indicate elevated risk at the time of this scan. The domain was flagged by 4 out of 91 security engines, with those detections describing the page as phishing-related. In addition, the screenshot shows a reward-style claim offering $1,289.83 with a countdown timer and congratulatory messaging, a pattern commonly associated with social-engineering or prize-lure pages rather than established promotional websites.
The malware scan also marked the main page as potentially suspicious, although that finding appears heuristic rather than tied to a named malware family. Blacklist checks for major content-threat databases were otherwise clean at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal and does not by itself prove harmful website content.
Taken together, the phishing-related engine detections, the deceptive-looking reward presentation, and the lack of clear operator identity raise meaningful concerns. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, expiring on 2026-09-27, and is hosted on Vercel infrastructure with the web server identified as Vercel. The domain resolves to an IP address in the United States, and its nameservers also point to Vercel-managed DNS.
The domain itself is relatively old at about 10 years, which can sometimes support legitimacy, but older domains and subdomains can still be repurposed or abused. DNSSEC appears to be unsigned, and the scan did not provide a confirmed TLS protocol version. No external links, referenced domains, or iframes were observed in the supplied scan output.
Share your experience with this website. Was it safe? Did you encounter any issues?