SafeMode - Analysis: btcgenix.com

Captura Visual

Información de Detección

https://btcgenix.com/

Detected Brand

BTC Genix

Country

International

Confianza

92%

HTTP Status

200

Report ID

6b65cc6a-f81…

Analyzed

2026-08-11 23:12

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1B9625572A040AD3F52A7E2C5A661237E93D3428CDA8B12117BFD8B0E4DE6F51FD35606
CONTENT ssdeep	192:QStjGIIoR+PCpJm42ztARfd92OqLq+Ddg6qtUmp9GUICSt:ZtSIIoRsCjQiUc+dMbGy4

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a343fcbcc5c1c0b6
VISUAL aHash	ff00012b070703ff
VISUAL dHash	67ffdfd3ffffffff
VISUAL wHash	ff00013f070707ff
VISUAL colorHash	02e00008000
VISUAL cropResistant	0081692723d900df,ff00000000000000,ffffdfd3ffffffff

Análisis de Código

Risk Score 53/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer

🔬 Threat Analysis Report

• Amenaza: Fraude de inversión en criptomonedas
• Objetivo: Inversores financieros/cripto
• Método: Página de aterrizaje HYIP con scripts ofuscados
• Exfil: Recolección de datos de formularios por JS
• Indicadores: Métricas financieras poco realistas
• Riesgo: Alto

🔒 Obfuscation Detected

unescape

📡 API Calls Detected

/api/sms-verification-status
/api/sms/send
POST
/api/sms/verify

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Content

Unrealistic financial claims indicating investment fraud.

Technical

JavaScript obfuscation techniques detected in forms.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Two-Factor Authentication Stealer

Objetivo

BTC Genix users (International)

Método de Ataque

obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: OTP Stealer
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

BTC Genix

Fake Service

Investment Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: HYIP/Investment Scam

The site lures users with promises of high financial returns to solicit investments or harvest personal credentials.

Secondary Method: Data harvesting

Collecting email and contact details to conduct follow-up phishing or social engineering.

Target Blockchain

Unknown

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

btcgenix.com

Registered

2026-04-23

Registrar

N/A

Estado

active

Phishing Analysis