SafeMode - Analysis: bitcoin-everest.net

Captura Visual

Información de Detección

https://bitcoin-everest.net/

Detected Brand

Bitcoin Everest

Country

International

Confianza

92%

HTTP Status

200

Report ID

39a712a8-373…

Analyzed

2026-08-12 23:12

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1AB6254B69102A93F11F3C1D2A621AB3F72E6914DDA4B0B0653FC4B2D4BC6DA0FC25599
CONTENT ssdeep	192:wVsBilI0IINBXf3myiCBdtE5kMEzmc8T5c3/7MNR3PZR/37:usBgxII/3m70DE9zW3jA3PDj

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c68cb8b086cfe1bc
VISUAL aHash	ff000074266000ff
VISUAL dHash	2f34cbc4c4cc2340
VISUAL wHash	ff000076767700ff
VISUAL colorHash	30000e40000
VISUAL cropResistant	c029292f2f2929c4,0000000000000000,4133c8c4cccd2340

Análisis de Código

Risk Score 53/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer

🔬 Threat Analysis Report

• Amenaza: Drenador de billeteras cripto
• Objetivo: Usuarios de criptomonedas
• Método: Ingeniería social mediante herramienta de trading
• Exfil: Envío de formulario JS
• Indicadores: JS ofuscado, promesas de ganancias rápidas
• Riesgo: Pérdida financiera crítica

🔒 Obfuscation Detected

unescape

📡 API Calls Detected

POST
/api/sms/verify
/api/sms/send
/api/sms-verification-status

📊 Desglose de Puntuación de Riesgo

Total Risk Score

95/100

Contributing Factors

Malicious Scripting

Obfuscated JS patterns identified

Deceptive Content

Crypto-sniping/drainer themes

Domain Indicators

Short domain history and niche crypto usage

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Two-Factor Authentication Stealer

Objetivo

Bitcoin Everest users (International)

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: OTP Stealer
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Bitcoin Everest

Official Website

N/A

Fake Service

AI Crypto Trading Terminal

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Wallet Drainer

The site uses a deceptive interface to trick users into connecting their Web3 wallets. Once connected, malicious scripts attempt to prompt the user to sign a fraudulent transaction or approve token transfers.

Secondary Method: Credential Harvesting

Forms designed to capture wallet information or API keys under the guise of setting up an AI trading terminal.

Target Blockchain

Ethereum

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

bitcoin-everest.net

Registered

2026-03-16

Registrar

Unknown

Estado

active

Phishing Analysis