Skip to content

Conversation

@g0d33p3rsec
Copy link
Contributor

Phishing Domain/URL/IP(s):

cooperlawfirm.com
lanches2000.com.br
https://lanches2000.com.br/M0E5QTQ3MVExMDdFNlI=
https://lanches2000.com.br/M0M5TDFONkI5WDdJMjY=
https://lanches2000.com.br/M0M5cjQ1OUgyTjYwMkk=
https://lanches2000.com.br/M0Q4SDZYMjA5ODdmNWE=
https://lanches2000.com.br/M0U5SDRoMVExbTdqNkM=
https://lanches2000.com.br/M0Y4SjAzMWs0cjhwMjc=
https://lanches2000.com.br/M0g4NjdBMno5ZDJROXI=
https://lanches2000.com.br/M0g5RjVSMFM5RzViNGc=
https://lanches2000.com.br/M0o4STNWNkI0cTFCMW4=
https://lanches2000.com.br/M0s4NDB6N2wxVzdZOTg=
https://lanches2000.com.br/M0w5TTUwMGE5cTg1NXE=
https://lanches2000.com.br/M1E5MDVZMUkwTjY4N24=
https://lanches2000.com.br/M1E5OTVxMUU3YjdINk8=
https://lanches2000.com.br/M1M4VTNhMnQ2NjZSOGM=
https://lanches2000.com.br/M1M5ODRaNzc3RjNPOUo=
https://lanches2000.com.br/M1M5VjNZMEs4RDk5Njk=
https://lanches2000.com.br/M205ZTVmMWc3VjVSNHM=
https://lanches2000.com.br/M245YTVsME41cDMwNVo=
https://lanches2000.com.br/M285VDUzMUswMDFIN0g=
https://lanches2000.com.br/M2I5dTV2MVUzODJwODk=
https://lanches2000.com.br/M2M5YTJVOEQxbzRXNXk=
https://lanches2000.com.br/M2Q5QTFQNnE5VTdEMkc=
https://lanches2000.com.br/M2c5MzRsMGs0cjlDNFc=
https://lanches2000.com.br/M2c5eDFPNnM5TTdqMjE=
https://lanches2000.com.br/M2g5WTQwN0gwWTRNOEU=
https://lanches2000.com.br/M2gxNDF2NFo2ZTVxOTE=
https://lanches2000.com.br/M2o5dzU0MTY1ZzBiM2E=
https://lanches2000.com.br/M3A5ZjFIMDI5ejRwMWw=
https://lanches2000.com.br/M3I3djFBOUMwWTJrMDA=
https://lanches2000.com.br/M3U5dDJUMzI5bjRYNGs=
https://lanches2000.com.br/M3g5ejV1MTMxWjM5MXk=
https://lanches2000.com.br/MzI5dTRzOWE0cThtM1o=
https://lanches2000.com.br/MzM5VTRxMngwWTQ1OWM=
https://lanches2000.com.br/MzU5dzRzMnU1UzNUMkE=
https://lanches2000.com.br/Mzc5SjVRMVg1eDFCNVM=
https://lanches2000.com.br/Mzg5SzVUMDM5eTB3NEI=
https://lanches2000.com.br/Mzk5ZzVvME45Yjk5Mkc=

Impersonated domain

1voucher.co.za
betway.co.za
ff.garena.com
fnb.co.za
hollywoodbets.net
instagram.com
moneymarketaccount.co.za
ottvoucher.com

Describe the issue

Current host of the phishing kit that was previously at rsabz.ir #1026 and is also at aishwaryajathakalaya.com #942. I also added cooperlawfirm.com to the temp domain blocklist, as it was active yesterday but currently returns a "Bandwidth Limit Exceeded" message.

Related external source

https://urlscan.io/result/019a12a7-4280-7322-abe4-2ef7dc781adc/
https://urlscan.io/result/019a12a7-7655-758f-b0f2-ba80f9444481/
https://urlscan.io/result/019a12a7-aae7-728f-b9f5-b1565dece6d8/
https://urlscan.io/result/019a12a8-15fc-715c-8c66-09d08695f067/
https://urlscan.io/result/019a12a8-4bc8-77d8-b428-ddbfbb784db4/
https://urlscan.io/result/019a12a8-809e-708e-b78f-2b5fcc30c5ef/
https://urlscan.io/result/019a12a8-ea02-7696-b979-2e33a8133b8c/
https://urlscan.io/result/019a12a9-21e7-7108-8bdd-fefab2316699/
https://urlscan.io/result/019a12a9-5714-73cb-9180-ee1abeabc4cc/
https://urlscan.io/result/019a12a9-f43a-7208-b745-b26b844043a8/
https://urlscan.io/result/019a12aa-5e22-7769-b79e-6a9b0ed90b61/
https://urlscan.io/result/019a12aa-9332-7281-b42d-109d7762856c/
https://urlscan.io/result/019a12aa-c8c7-711a-9f76-61a66ea7d3f3/
https://urlscan.io/result/019a12aa-fc3d-75b8-a28b-6b1a9a3fcce1/
https://urlscan.io/result/019a12ab-3067-742c-b6cb-a781844b827f/
https://urlscan.io/result/019a12ab-a16c-74e9-8670-4e0434be9b30/
https://urlscan.io/result/019a12ac-09d5-76f9-b9d6-d4f4e865495b/
https://urlscan.io/result/019a12ac-3e66-730f-8921-47bb618cfbd6/
https://urlscan.io/result/019a12ac-dcfc-7396-9964-435f38223608/
https://urlscan.io/result/019a12ad-1194-70a9-9d9e-80346f054525/
https://urlscan.io/result/019a12ad-8081-724f-bcd7-feafd91331b6/
https://urlscan.io/result/019a12ad-b501-72a0-b602-c979c8ba10e8/
https://urlscan.io/result/019a12ad-e9b7-73fe-a88b-4db2ab3a3d86/
https://urlscan.io/result/019a12ae-1e9d-759d-80ef-47ba0e56e600/
https://urlscan.io/result/019a12ae-8998-776e-b0a3-a20e6f694c5e/
https://urlscan.io/result/019a12ae-bf01-75b1-8186-8f7cd97602b4/
https://urlscan.io/result/019a12ae-f2b9-7359-8009-2513bfdbc1e3/

Screenshot

Click to expand

Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot

@g0d33p3rsec g0d33p3rsec requested review from a team as code owners October 23, 2025 20:22
@g0d33p3rsec g0d33p3rsec merged commit 1a62d42 into Phishing-Database:master Oct 23, 2025
@g0d33p3rsec g0d33p3rsec deleted the add-lanches2000.com.br branch October 23, 2025 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant