Skip to content

Conversation

@g0d33p3rsec
Copy link
Contributor

Phishing Domain/URL/IP(s):

almivision.com
https://almivision.com/M004NDFIM3UxMzQ2NEI=
https://almivision.com/M0k5VjUwNmoxazhENlo=
https://almivision.com/M0k5ZDU0NVg5cDJUOWM=
https://almivision.com/M0o4TzlsNGUzbTA3MUU=
https://almivision.com/M0o5VzVoNm4zVDRtM08=
https://almivision.com/M1Q3MzJ3Nk0zZTFSMFQ=
https://almivision.com/M1U4QTdVOWwzeTh1OWw=
https://almivision.com/M1U4aTlmNGozVjBVMXA=
https://almivision.com/M1Y5NTR4MGg0cTlrNHo=
https://almivision.com/M1g5azVGNjAyZTNwN0Y=
https://almivision.com/M2E4QTdCOWIzSzhIOVY=
https://almivision.com/M2g5OTVYNFA3ZTBSNXI=
https://almivision.com/M2s5ejE4NXIzTjB0M1g=
https://almivision.com/M2w5dzVzNlk0azhGM2I=
https://almivision.com/M3I5SjU5M1g2dTVFOXg=
https://almivision.com/M3M4SzljOHM5dTljN1c=
https://almivision.com/M3gzbDJnNHc2Qjd0N3c=
https://almivision.com/M3k4MzlCMGwxajhFOUY=
https://almivision.com/MzA3bTl6NVE5cjUzMUQ=
https://almivision.com/MzY5dDQ0OUI4UTBGMTI=
https://almivision.com/MzI5MDVINTY5YjVaOW8=

Impersonated domain


Describe the issue

Current host of the phishing kit that was previously at rsabz.ir #1026 and is also at lanches2000.com.br #1041. For some reason, the scan didn't grab the related images from imagizer.imageshack.com but I'm confident that this is the same kit.

Related external source

https://urlscan.io/result/019a2615-9026-7709-8cd4-946ce1473ee0/
https://urlscan.io/result/019a2d01-a793-726a-9624-a2d717f5cb37/
https://urlscan.io/result/019a2d01-dc43-764f-986b-40898f8ba364/
https://urlscan.io/result/019a2d02-11fa-757d-80a7-5b29e29c5389/
https://urlscan.io/result/019a2d02-46d4-7645-8b21-f44e17c08100/
https://urlscan.io/result/019a2d02-7a44-721f-91c7-6cff008965e5/
https://urlscan.io/result/019a2d02-ae22-7466-a284-a4035cfa8441/
https://urlscan.io/result/019a2d02-e31e-734e-99cb-918c10cbfaef/
https://urlscan.io/result/019a2d03-18b6-735f-9506-80a9589dd68c/
https://urlscan.io/result/019a2d03-4c67-779c-90b4-e884ea7cf3cf/
https://urlscan.io/result/019a2d03-809f-716b-b4c9-4f43af378035/
https://urlscan.io/result/019a2d03-b5a2-7407-96a5-97252bf26a0a/
https://urlscan.io/result/019a2d03-e9b0-7153-b299-13cfc29d4045/
https://urlscan.io/result/019a2d04-1ed4-73da-aa6d-3f1e76837b17/
https://urlscan.io/result/019a2d04-5369-7488-adac-7810b5d99ed0/
https://urlscan.io/result/019a2d04-8831-7479-86d2-e9919edb065a/
https://urlscan.io/result/019a2d04-bc2e-731c-950f-5afe5a195253/
https://urlscan.io/result/019a2d04-f11c-7066-aad1-99a0ab9e27b0/
https://urlscan.io/result/019a2d05-2583-75fe-b9d7-ca69292b68d3/
https://urlscan.io/result/019a2d05-5a8e-700a-a9cb-7df20f8d410c/
https://urlscan.io/result/019a2d05-8fda-76b8-b10b-3d259c4ba62e/

Screenshot

Click to expand 019a2615-9026-7709-8cd4-946ce1473ee0

@g0d33p3rsec g0d33p3rsec requested review from a team as code owners October 28, 2025 23:21
@g0d33p3rsec g0d33p3rsec merged commit ddb1c3b into Phishing-Database:master Oct 28, 2025
@g0d33p3rsec g0d33p3rsec deleted the add-almivision.com branch October 28, 2025 23:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant