btc-bar[.]com
Análisis de phishing y seguridad de btc-bar.com
“BTC 1000 BAR”
btc-bar.com — Contenido no disponible (HTTP 404). Resumen de las pruebas: VirusTotal 2/95 (CRDF, Gridinsoft); PhishDestroy score 71/100. Registrador: Wix.com.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of btc-bar.com indicates this domain was actively flagged as a fraudulent Bitcoin reward scheme. The site, titled 'BTC 1000 BAR,' was registered on September 5, 2025, through Wix.com Ltd. and has since been taken offline, returning an HTTP 404 status as of the latest check. Infrastructure analysis reveals the domain resolved to a single IP address, 34.149.87.45, hosted on Google LLC's network (AS396982) in the United States. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites, and does not provide conclusive evidence of intent. Detection data shows the domain was flagged by 2 of 95 security vendors on VirusTotal, a low but non-zero detection rate that aligns with emerging threats.
It also appears on at least one security blocklist, specifically PhishDestroy, which specializes in phishing and scam site identification. The domain's nameserver configuration was minimal, utilizing only one nameserver, which may indicate a low-cost or disposable hosting setup often associated with short-lived scam operations. Technologies detected on the site include Wix, React, AngularJS, and jQuery, a combination commonly used for both legitimate and fraudulent websites. The presence of Wix as the registrar and hosting platform suggests the site may have been created using a drag-and-drop website builder, which lowers the barrier to entry for threat actors. While the exact content and mechanics of the scam are not fully analyzed due to the site's offline status, the page title 'BTC 1000 BAR' strongly implies a fake cryptocurrency reward or giveaway scheme, a tactic frequently used to deceive users into disclosing wallet credentials or sending funds.
Defenders should treat this domain as a confirmed malicious indicator. Organizations are advised to block the domain and its associated IP address (34.149.87.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 4 identified
Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.
www.wix.com 100 % de confianzaReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100 % de confianzaAngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.
angularjs.org 100 % de confianzajQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100 % de confianzaAnálisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.