avast-premium[.]shop

PhishDestroy first observed avast-premium.shop on Aug 25, 2026. The captured page title is “Avast | Download Free Antivirus for PC, Mac & Android”. Current evidence score: 98/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 15 detections among 91 engines: alphaMountain.ai, BitDefender, Certego, CRDF, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, LevelBlue, Lionic, SOCRadar, Sophos, Viettel Threat Intelligence, VIPRE on Aug 25, 2026 at 22:40 UTC. Non-positive and contextual checks: AlienVault OTX listed 9 community pulse references (not vendor detections) on Aug 25, 2026 at 22:42 UTC. The separate external-blocklist snapshot contained no matches on Aug 25, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 25, 2026 at 22:41 UTC. URLScan captured the page on Aug 25, 2026 at 21:36 UTC.

The collector marked the hostname reachable on Aug 25, 2026 at 21:36 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 95.85.246.181 on AS209693 (OC NETWORKS LIMITED). The recorded endpoint location is Stockholm, SE. The stored server header is Apache/2.4.58 (Ubuntu). The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 24, 2026; checked Aug 25, 2026 at 22:02 UTC.

Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.