bitbotclaim.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of bitbotclaim.pages.dev
This website appears to present itself as a cryptocurrency token-claim landing page for “Bitbot,” describing the project as a Telegram-based self-custodial trading bot. The page content is promotional in style, with calls to “Claim Now” and “Connect Wallet,” along with fundraising and token-allocation figures intended to encourage user interaction.
Based on the screenshot and metadata, the site is focused on crypto asset claiming rather than general informational content. It is hosted on a pages.dev subdomain rather than a standalone branded domain, which may indicate a temporary, campaign-style, or unofficial deployment. The page also references external crypto-related domains, suggesting it may be attempting to associate itself with broader wallet or Web3 ecosystems.
No clear operator identity is visible in the provided scan data. While the branding imitates a polished crypto project landing page, the available information does not independently confirm whether this subdomain is officially operated by the Bitbot project or by an unrelated third party.
Safety Assessment for bitbotclaim.pages.dev
This domain shows multiple risk indicators at the time of this scan. It was flagged by 12 out of 91 security engines, with most of those detections classifying it as phishing or malicious. In addition, one blacklist database listed the domain, and the page behavior shown in the screenshot includes a prominent wallet-connection prompt tied to a token-claim theme, which is a pattern commonly associated with credential harvesting or unauthorized wallet access attempts.
Although some blacklist sources did not list the domain and the malware file scan did not report confirmed malicious files, those cleaner signals do not outweigh the broader phishing consensus from multiple security engines. The use of a hosted subdomain for a crypto claim page, combined with the request to connect a wallet and the lack of clearly verifiable operator information, may increase the risk profile.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and it is served through Cloudflare infrastructure on IP address 188.114.96.2. The domain is several years old, which can sometimes be a stabilizing signal, but in this case it is a pages.dev-hosted subdomain rather than a dedicated primary domain. DNSSEC appears to be unsigned.
From a security standpoint, the main concerns are reputational rather than transport-layer related. HTTPS is present, but that only protects the connection and does not verify the legitimacy of the content. The scan also noted flagged internal asset URLs and a flagged referenced domain, which may indicate suspicious page components or campaign-related infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?