EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

https://db.everesta.cz/
Detected Brand
Databáze Everesta s.r.o. (Unknown)
Country
International
Confidence
70%
HTTP Status
200
Report ID
54b93bd1-027…
Analyzed
2026-02-22 16:32

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1BEB15330A224641E602FB5C0F625EB59B27BC716CF020DB9D2EC1B5EC3DDDA148A56F5
CONTENT ssdeep
96:+u7unj26+s1ZojM81wnhqnhbnhUwnhrQnhHwnhBnhFnhN:+uP66jM81wQZywlQ1wz/P

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9999666666669999
VISUAL aHash
0018180000000000
VISUAL dHash
0c32b20c30000000
VISUAL wHash
fffffffb00000000
VISUAL colorHash
07000000000
VISUAL cropResistant
83707078709b9860,0c32b20c30000000

Code Analysis

Risk Score 62/100
Threat Level BAJO
🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Potentially Malicious
• Target: Users of Databáze Everesta s.r.o. login page
• Method: Unknown
• Exfil: Unknown
• Indicators: Obfuscated Javascript, Login Form, Javascript Submission
• Risk: Low

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • eval
  • fromCharCode
  • document.write
  • base64_strings

📤 Form Action Targets

  • /

📊 Risk Score Breakdown

Total Risk Score
35/100

Contributing Factors

Obfuscated Javascript
Javascript obfuscation can hide malicious code
Domain Age
Older domains are generally less likely to be phishing attempts.

🔬 Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
Databáze Everesta s.r.o. (Unknown) users (International)
Attack Method
credential harvesting forms + obfuscated JavaScript
Exfiltration Channel
HTTP POST to backend
Risk Assessment
HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester
  • 16 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Databáze Everesta s.r.o.
Fake Service
Login

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site is designed to collect user login credentials. It presents a login form to capture usernames and passwords.

Secondary Method: Javascript Injection (Potential)

The presence of obfuscated javascript raises the possibility of code injection that may redirect or steal credentials.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
db.everesta.cz
Registered
2010-08-12
Registrar
Unknown
Status
ACTIVE

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Planters Telephone Cooperative
https://good-input-332054.framer.app/
Jun 12, 2026
 Screenshot
Instagram
https://www.instagrammer-three.vercel.app/
Mar 21, 2026
 Screenshot
SurgeWeb
https://precious-language-102277.framer.app/
Feb 11, 2026
 Screenshot
SurgeWeb
https://precious-language-102277.framer.app/
Feb 11, 2026
No screenshot
Yam
https://s.yam.com/ZSO1S
Jan 27, 2026
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.