SafeMode - Analysis: evotella.com

Captura Visual

Información de Detección

https://evotella.com/

Detected Brand

Unknown

Country

International

Confianza

100%

HTTP Status

200

Report ID

1bdd7b25-a0a…

Analyzed

2026-07-04 23:37

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1DA922E309010AA3701D393E2673A5B1BF3E2D294CA630A1927F9C30D6FD7E55CE67669
CONTENT ssdeep	192:IY4kQmKBZkDOtn1f1RbePAo/zRi5XIaHjm8aKrF9cVfx2pPermJrJYzdaJfByI:IBNkDO11tdm/zavHyfQF9cVfmKdaJpyI

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	936d6992b46c8ee1
VISUAL aHash	066070766e2e6440
VISUAL dHash	94cac7cccccccdd2
VISUAL wHash	666072767e6e7460
VISUAL colorHash	38000600048
VISUAL cropResistant	94cac7cccccccdd2

Análisis de Código

Risk Score 73/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Estafa de Inversión/Cripto
• Objetivo: Usuarios de criptomonedas
• Método: Página de aterrizaje engañosa con promesas de recuperación de tokens
• Exfil: Exfiltración mediante JS ofuscado
• Indicadores: Terminología financiera vaga
• Riesgo: Crítico

🔒 Obfuscation Detected

fromCharCode

🎯 Kit Endpoints

/login

📊 Desglose de Puntuación de Riesgo

Total Risk Score

85/100

Contributing Factors

Obfuscated Code

Detection of fromCharCode obfuscation technique

Suspicious Content

Use of 'Recoverable Token' scam verbiage

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

General public

Método de Ataque

credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
4 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

EVOtella

Fake Service

Crypto Recovery/Wallet Service

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

Uses a fake login portal to harvest credentials or seed phrases.

Secondary Method: Wallet Drainer

Potential connection to malicious DApps once user logs in.

Target Blockchain

Multiple

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

evotella.com

Registered

2022-01-21

Registrar