everstakebot[.]com

This domain operates as a crypto drainer, specifically designed to siphon cryptocurrency assets from victims by impersonating legitimate investment platforms. Analysis of the page title 'EverStake Bot|| Investment solutions designed with elegance and finesse' indicates an attempt to mimic EverStake, a known staking service provider, to deceive users into connecting wallets or authorizing transactions that result in unauthorized fund transfers to attacker-controlled addresses. The threat primarily targets users through social engineering tactics, including fake investment opportunities or bot services advertised via compromised or spoofed communication channels. Technical evidence confirms the malicious nature of everstakebot.com. The domain was registered on May 05, 2025, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. VirusTotal reports 5 out of 95 security vendors flagging this domain as malicious, while AlienVault OTX lists it in one threat intelligence pulse. The domain appears on one security blocklist and was blocked by PhishDestroy. Infrastructure analysis reveals it resolved to the IP address 198.12.66.123, which may host additional malicious content. Scamadviser and Gridinsoft both assign trust scores of 1/100 and 0/100, respectively, further corroborating its fraudulent intent. Users who visited everstakebot.com or interacted with its content should immediately disconnect any connected wallets and cease all transactions. If cryptocurrency was transferred or wallet credentials were entered, affected parties should revoke any suspicious smart contract approvals using a blockchain explorer or wallet management tool. Monitor wallet activity for unauthorized transactions and consider migrating assets to a new wallet if compromise is confirmed. Report the incident to relevant blockchain security teams and local cybercrime authorities to assist in tracking the attacker's infrastructure. Exercise heightened caution with unsolicited investment offers, particularly those involving wallet connections or fund transfers.