everestcity[.]com

everestcity.com has been confirmed as a generic phishing site. The domain does not appear to be associated with a specific brand or utilize a known drainer kit. Analysis indicates that the site was likely used to trick users into providing sensitive information, such as login credentials or financial data, under the guise of a legitimate service or product.

Infrastructure analysis reveals that the domain has a VirusTotal score of 3/95, indicating that 3 out of 95 security vendors flag this domain as malicious. The domain was registered through Atak Domain Bilgi Teknolojileri A.S. and resolves to the IP address 192.250.235.17. It was created on September 26, 2024, and currently appears on 1 security blocklist. The site is offline as of the latest check, and the page title found was 'ชุดโด๊ปไก่ชนEVERESTเอฟเวอเรท – ชุดโด๊ปสมุนไฟรสำหรับไก่ชนEVERESTเอฟเวอเรทเนเวอร์ด'. The domain uses WordPress, MySQL, PHP, LiteSpeed, jQuery Migrate, jQuery, and HTTP/3. The SSL certificate is issued by Let's Encrypt, and the Gridinsoft trust score is 0/100, indicating a complete lack of trustworthiness.

The current status of everestcity.com is offline, and it has been taken down. However, the remaining risk is still elevated due to the domain's history of being flagged as malicious. Users are advised to avoid any links or references to this domain and to report any instances of it being active to their security teams. Organizations should ensure that their web filters and security systems are updated to block this domain and similar threats. Regularly monitoring and updating security measures can help mitigate the risk of falling victim to such phishing campaigns.