EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of aaverage.com

Detection Info

http://aaverage.com
Detected Brand
Unknown
Country
Unknown
Confidence
95%
HTTP Status
200
Report ID
a231ee7e-d13…
Analyzed
2026-06-15 03:39
Final URL (after redirects)
http://aaverage.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T149C236A0C1D55A7B508383E967F263AAFBC042C4C9935F04E3F482DE5A55E91EC9BB4C
CONTENT ssdeep
384:QP60fxQQqu2FlA7POgbgXpy8JCVzS9o+XQEp/MrLgtYpNKyRB/tF0xaueBWNGtr/:oHPViXKpb10w

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c059863ea67acd59
VISUAL aHash
387c7c4c0000007e
VISUAL dHash
e0d090d8d8d4c4e4
VISUAL wHash
3c7c7e6c0c50647e
VISUAL colorHash
30002000010
VISUAL cropResistant
92b4969492e0d43b,ffffffade9fff7ff,ffffff36d46f27ff,ffffff56e4fbf3ff,ffff6d69f7f7ffef,e0d090d8d8d4c4e4

Code Analysis

Risk Score 15/100
Threat Level ALTO
⚠️ Phishing Confirmed

🔒 Obfuscation Detected

  • eval
  • unescape
  • document.write
  • hex_escape
  • unicode_escape

🎯 Kit Endpoints

  • http://androidblogg.com

📊 Risk Score Breakdown

Total Risk Score
15/100

Contributing Factors

Code Obfuscation
JavaScript code obfuscated using 56 technique(s) to evade detection

🔬 Comprehensive Threat Analysis

Threat Type
Unknown Threat
Target
General public
Attack Method
obfuscated JavaScript
Exfiltration Channel
Unknown
Risk Assessment
LOW - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

  • 56 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Generic Phishing
Official Website
N/A
Fake Service
Credential harvesting service

⚔️ Attack Methodology

Primary Method: Phishing Webpage

Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 56 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
aaverage.com
Registered
2026-06-11 05:53:47+00:00
Registrar
SevenX LLC
Status
Recently registered (3 days old)

Hosting Information

Provider
SevenX LLC
ASN

🤖 AI-Extracted Threat Intelligence

Scan History for aaverage.com

Found 1 other scan for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.