Skip to content

Conversation

@g0d33p3rsec
Copy link
Contributor

Phishing Domain/URL/IP(s):

afoshaclass.com.br
https://afoshaclass.com.br/M002UjRPMXk3ejRtNXo=
https://afoshaclass.com.br/M045cTNUNncwUTE3MFY=
https://afoshaclass.com.br/M0E5dTZpMjU4aDBFMW8=
https://afoshaclass.com.br/M0I0aTFvOWQ0TzRXNlc=
https://afoshaclass.com.br/M0I5bzVTM044RjZ1OUk=
https://afoshaclass.com.br/M0Q5cDYzMUc5ZzRlOVQ=
https://afoshaclass.com.br/M0U5NDZKM2UxcDYwMDI=
https://afoshaclass.com.br/M0U5NzZOMjc5VDByN0c=
https://afoshaclass.com.br/M0U5ZjZuMlMxYTRzMjI=
https://afoshaclass.com.br/M0g3aTdzOEoxZzN4OFk=
https://afoshaclass.com.br/M0o5RDMzNjk3Nzc3Mkc=
https://afoshaclass.com.br/M1A1eDcyNE8wejV2NVI=
https://afoshaclass.com.br/M1A3TTZEMHYxYzNzMW0=
https://afoshaclass.com.br/M1E5QTRGNWkxWjRGNU0=
https://afoshaclass.com.br/M1M4YjJKMGc3VTNxNGg=
https://afoshaclass.com.br/M1Q5cTJsNnI5ZzhIMlY=
https://afoshaclass.com.br/M1U5QzZTMkM0cTloOGo=
https://afoshaclass.com.br/M1Y4QzBRNmkxTDN3NUU=
https://afoshaclass.com.br/M1c5aDZqMlI0YjE3N1c=
https://afoshaclass.com.br/M1k5UzRhOU44bTBhMUk=
https://afoshaclass.com.br/M285bDZPMkoySjVRMHU=
https://afoshaclass.com.br/M2U5TTAxMXE3STNjMHI=
https://afoshaclass.com.br/M2U5ejZVMXowZTdkNkY=
https://afoshaclass.com.br/M2Y5NzZuMlA5YjhmMEU==
https://afoshaclass.com.br/M2Y5QTUwOHcxejVJOXU=
https://afoshaclass.com.br/M3E4ZzNLMU85ajJLMkQ=
https://afoshaclass.com.br/M3M5RjFTMDI3ODVuNlU=
https://afoshaclass.com.br/M3M5YjZHMTMwcDc0Nkg=
https://afoshaclass.com.br/M3U5TDRWOWwwUjYyNVg=
https://afoshaclass.com.br/M3Y4WTNiOTUyQzFWM3k=
https://afoshaclass.com.br/M3Y5NTBFOUU3WjFMN2U=
https://afoshaclass.com.br/M3c2djREOXcySjhuNEM=
https://afoshaclass.com.br/M3g1cjIyNUU2WjBnNFc=
https://afoshaclass.com.br/MmYwWjltNms5OTVyMjE=
https://afoshaclass.com.br/MnY3TjVtN3Y2Uzl2M1E=
https://afoshaclass.com.br/Mng4MDNMMjIxbjV2NEE=
https://afoshaclass.com.br/MzA2QjNJNUQzbDBmOUE=
https://afoshaclass.com.br/MzE5WjFSNUIzVjBwM1U=
https://afoshaclass.com.br/MzI3YjhNNlYxWDk3MFE=
https://afoshaclass.com.br/MzI4WjduMkg5VDJ3OXQ=
https://afoshaclass.com.br/Mzk5UzZZMkM5ZTI3Nlk=

Impersonated domain

1voucher.co.za
betway.co.za
justice.gov.za
microsoft.com
moneymarketaccount.co.za
office.com
ottvoucher.com
sassa.gov.za
shoprite.co.za/
wsu.ac.za

Describe the issue

Current host of the phishing kit that was previously at alvorereports[.]com #1054

Related external source

https://urlscan.io/result/019a50ca-f989-74d7-9241-a15505f7aba3/
https://urlscan.io/result/019a50cb-307a-724b-ad48-221b04fd8573/
https://urlscan.io/result/019a50cb-6556-71dd-b529-640132438dd0/
https://urlscan.io/result/019a50cb-98d9-754f-b683-0e83279db52f/
https://urlscan.io/result/019a50cb-ce47-7274-b688-b414992992a6/
https://urlscan.io/result/019a50cc-0338-748c-8785-6c88e68ac6f9/
https://urlscan.io/result/019a50cc-37e0-752c-9482-78af78c0df81/
https://urlscan.io/result/019a50cc-6cc4-760c-98af-636acc2ae376/
https://urlscan.io/result/019a50cc-a248-711a-b3fe-a007b1bb5be0/
https://urlscan.io/result/019a50cc-d863-74fa-9387-68551406d8e3/
https://urlscan.io/result/019a50cd-10f6-76c3-9f2d-1c0077ecee95/
https://urlscan.io/result/019a50cd-45b3-765a-a282-f395ce9894f1/
https://urlscan.io/result/019a50cd-7aa9-7593-a849-a321d5d53c2d/
https://urlscan.io/result/019a50cd-af6f-762e-a2a3-400532e10765/
https://urlscan.io/result/019a50cd-e4f6-764e-a892-61fe1028466a/
https://urlscan.io/result/019a50ce-1b3f-709a-83a4-f25fb6996a0d/
https://urlscan.io/result/019a50ce-50e7-7798-803c-fed064c472d8/
https://urlscan.io/result/019a50ce-85ae-7769-8fd7-f2fe4a43088c/
https://urlscan.io/result/019a50ce-baac-7401-8713-f5c32a4c8095/
https://urlscan.io/result/019a50ce-ef5e-7499-9a6d-aca768763330/
https://urlscan.io/result/019a50cf-244e-77fb-81e8-93e7f8e4e551/
https://urlscan.io/result/019a50cf-591a-7405-940e-65ad80e779f0/
https://urlscan.io/result/019a50cf-8bbf-774e-99b2-96fb9e85d5fa/
https://urlscan.io/result/019a50cf-c0a2-7174-83df-e8bc700491ec/
https://urlscan.io/result/019a50cf-f518-74ba-9b24-b5bce2cedc74/
https://urlscan.io/result/019a50d0-284f-73a8-8a46-1bab199004dc/
https://urlscan.io/result/019a50d0-5d2a-7467-ba04-c342152238c7/
https://urlscan.io/result/019a50d0-9244-777c-b2fa-c68d4c8b4630/
https://urlscan.io/result/019a50d0-c716-7658-9386-61f5f593f376/
https://urlscan.io/result/019a50d0-f9f0-761f-98f1-da78f5e73cd9/
https://urlscan.io/result/019a50d1-2cfc-752a-9e17-13a381602785/
https://urlscan.io/result/019a50d1-6033-71b8-ab7b-52a4188d768a/
https://urlscan.io/result/019a50d1-94a6-72eb-a920-80296d9eeb61/
https://urlscan.io/result/019a50d1-c997-764e-8bd1-683fb0e9fc9c/
https://urlscan.io/result/019a50d1-fe56-7718-9b6c-6edc0b3f2465/
https://urlscan.io/result/019a50d2-325a-76b1-96f1-0357cc379ccd/
https://urlscan.io/result/019a50d2-66df-70c8-9174-4d7d409897d8/
https://urlscan.io/result/019a50d2-9ae8-7629-8261-7b6b3ce88a29/
https://urlscan.io/result/019a50d2-d099-761d-b972-2593ff83f691/
https://urlscan.io/result/019a50d3-050a-76bd-b103-6fdfdffd469f/
https://urlscan.io/result/019a50d3-38b7-738d-9789-e70c5078e7d1/

Screenshot

Click to expand

Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot
Screenshot

@g0d33p3rsec g0d33p3rsec requested review from a team as code owners November 4, 2025 21:54
@g0d33p3rsec g0d33p3rsec merged commit f11e51d into Phishing-Database:master Nov 4, 2025
@g0d33p3rsec g0d33p3rsec deleted the add-afoshaclass.com.br branch November 4, 2025 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant