Security Scan Report: avntika.in

Redirected to:
blob:https://ronikop.com/c65fb706-15c9-4d0f-a015-7f3aa5cba3ff
Submitted: Sep 22, 2026, 6:22:10 PMCompleted: Sep 22, 2026, 6:22:30 PMpubliccompleted

This website contacted 4 IPs in 2 countries across 4 domains to perform 5 HTTP transactions. The main domain is .

Submitted URL: https://avntika.in/lmgexrn/icplndk/ijqxpal/sub.html

Effective URL:

blob:https://ronikop.com/c65fb706-15c9-4d0f-a015-7f3aa5cba3ff
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed Microsoft credential-phishing page on avntika.in: clones the Microsoft login/MFA flow, harvests passwords via a blob: iframe on ronikop.com, and triggered a CRITICAL credential-theft IDS alert.

Risk Factors (5)
Microsoft brand impersonation on non-Microsoft, unranked domain
Credential (password) harvesting form with MFA bypass flow
CRITICAL IDS signature for successful credential theft/exfiltration
Phishing page rendered inside blob: iframe hosted on a third-party domain
Domain absent from Cisco Umbrella top 1M while claiming a top-10K brand
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain name 'avntika.in' uses the Indian country-code top-level domain (.in) with no subdomain. The core label 'avntika' covers 7 characters with 3 vowels and four consonants. It segments into three words: avn, tik, a. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://avntika.in/lmgexrn/icplndk/ijqxpal/sub.html

Page Load Overview

1.48s
Total Load Time
28 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,203 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service62% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
62%
technology software
61%
corporate business
59%
adult content
55%
documentation technical
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2156.238.98.151Indore, Madhya Pradesh, India
AS59187NEEVAI SUPERCLOUD PVT LTD
1108.179.232.89Ashburn, Virginia, United States
AS31898Oracle Corporation
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
54--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3742A73F1903229A117C619B6907BEE1A3F8253D6221BF6F43777648BCA9C6067390D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:BoYParYoENM6HN26Ag56ITbS8bs3Q28PUIcmRe0U/+sI:HP69IkhRYRe0JsI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:354454:BhCSLSCngkIjt4QYoyrwboFVfACAgAQYigQFICpSMrAjAIsQUZDCKICCAIQHAFoFIIAEqgESSQBQZF1ATgVlyigpIVZVsFyC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000383b3737373f
Perceptual Hash:845971764cd9d966
Difference Hash:98e4f2d3e5e7e6e6
Wavelet Hash:0000383f373f377f
Color Hash:#bf9540

Other Hashes

Crop Resistant:98e4f2d3e5e7e6e6

Scan History

Scan history not available

Unable to load historical scan data