avantisfi[.]fi
“Home | Avantis”
avantisfi.fi — Não verificado. Tipo de golpe: Generic Phishing. Resumo das evidências: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, ESET); 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 95/100. Registrador: Immaterialism.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
avantisfi.fi is currently classified as a generic phishing site with a high risk rating. The domain was registered on 25 October 2025 through Immaterialism Ltd and remains active as of the 12 July 2026 assessment. The page title returned by the server is "Home | Avantis", which aligns with the generic phishing categorization but provides no further insight into the targeted brand or content. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3, hosted in the United States and advertised under ASN 13335, which belongs to a major content delivery network. The domain is served behind Cloudflare’s network, using nameservers bethany.ns.cloudflare.com and justin.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the "WE1" designation, indicating a valid HTTPS service. Detected technologies include Google Analytics, Cloudflare Browser Insights, and HTTP/3, suggesting a modern web stack. Reputation signals are strongly negative. The domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports that 15 out of 95 scanned security vendors flag the domain as malicious. These indicators collectively confirm the presence of malicious activity associated with the domain. Defenders should block network traffic to 188.114.97.3 and to the domain name itself, institute DNS sinkholing where possible, and monitor for any credential harvesting attempts that reference the "Home | Avantis" title. Because the underlying page content has not been examined, further analysis of the site’s payload and any credential collection mechanisms is recommended. Continuous re‑evaluation of the domain’s status on blocklists and VirusTotal is advised to capture any changes in malicious behavior.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 4 identified
Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% de confiançaCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise da configuração do site
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo