Skip to page content

AEGLIX MIND

Intelligence for Africa and the Gulf

Automatically generated evidence report

Top Phishing Threats in Africa This Week

Available Africa-tagged phishing observations, grouped by indicator and ordered by the number of reporting sources. This is not a ranking of all attacks or victims across Africa.

Week beginning 2026-10-26

Generated from stored records as of 2026-10-27T22:36:03.554441+00:00. 21 unique eligible indicators in the bounded archive query.

Source coverage: openphish: 21.

Available observations

  1. http://roblox[.]com[.]et/communities/8751134768/Misty-Army

    Sources: openphish · Last stored retrieval 2026-10-27T21:24:44.746861+00:00

    Investigate available evidence
  2. http://roblox[.]com[.]et/users/2377452159/profile

    Sources: openphish · Last stored retrieval 2026-10-26T22:31:03.397817+00:00

    Investigate available evidence
  3. http://www[.]newhorizonsrehab[.]ke/arm/amnd/

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:25.456933+00:00

    Investigate available evidence
  4. https://phosama[.]co[.]za/broad_light/solid[.]html

    Sources: openphish · Last stored retrieval 2026-10-26T22:31:05.723615+00:00

    Investigate available evidence
  5. https://www[.]r[.]oblox[.]com[.]et/users/6525325044/profile

    Sources: openphish · Last stored retrieval 2026-10-27T04:09:56.496612+00:00

    Investigate available evidence
  6. https://www[.]roblox[.]com[.]et/games/124331793246454/UwUs-Tower?privateServerLinkCode=88380561114050715342591383119023

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:26.483364+00:00

    Investigate available evidence
  7. https://www[.]roblox[.]com[.]et/users/3145712069/profile

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:26.461009+00:00

    Investigate available evidence
  8. https://www[.]roblox[.]com[.]et/users/4243002378/profile

    Sources: openphish · Last stored retrieval 2026-10-27T04:09:54.110946+00:00

    Investigate available evidence
  9. https://www[.]roblox[.]com[.]et/users/4486801085/profile

    Sources: openphish · Last stored retrieval 2026-10-27T04:09:55.798672+00:00

    Investigate available evidence
  10. https://www[.]roblox[.]com[.]et/users/6853786715/profile

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:26.370946+00:00

    Investigate available evidence
  11. https://www[.]roblox[.]com[.]et/users/9314991746/profile

    Sources: openphish · Last stored retrieval 2026-10-27T21:24:44.001681+00:00

    Investigate available evidence
  12. https://www[.]roblox[.]et/users/6765120257/profile

    Sources: openphish · Last stored retrieval 2026-10-27T04:09:55.199144+00:00

    Investigate available evidence
  13. https://www[.]roblox[.]rw/games/107778070777162/Steal-An-Egg?privateServerLinkCode=11040290185766545005746312904812&game_id=107778070777162&game_name=Steal-An-Egg

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:24.898761+00:00

    Investigate available evidence
  14. https://www[.]roblox[.]rw/games/13076380114/Heroes-Battlegrounds?privateServerLinkCode=11040290185766545005746312904812&game_id=13076380114&game_name=Heroes-Battlegrounds

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:25.217183+00:00

    Investigate available evidence
  15. https://www[.]roblox[.]rw/games/13600218266/My-Movie?privateServerLinkCode=11040290185766545005746312904812&game_id=13600218266&game_name=My-Movie

    Sources: openphish · Last stored retrieval 2026-10-26T22:31:06.510545+00:00

    Investigate available evidence
  16. https://www[.]roblox[.]rw/games/139410450104051/Chat-with-AI-Emiko?privateServerLinkCode=53291186049385785320944302058239

    Sources: openphish · Last stored retrieval 2026-10-26T22:31:06.766714+00:00

    Investigate available evidence
  17. https://www[.]roblox[.]rw/games/15269951959/SHINJI-Legends-Battlegrounds?privateServerLinkCode=11040290185766545005746312904812&game_id=15269951959&game_name=SHINJI-Legends-Battlegrounds

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:25.113617+00:00

    Investigate available evidence
  18. https://www[.]roblox[.]rw/games/77182599101794/-4nn1s-place?privateServerLinkCode=29443536713818717471407919220012

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:25.388312+00:00

    Investigate available evidence
  19. https://www[.]roblox[.]rw/games/84107034759866/UPD-Countryball-Simulator?privateServerLinkCode=11040290185766545005746312904812&game_id=84107034759866&game_name=UPD-Countryball-Simulator

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:24.794018+00:00

    Investigate available evidence
  20. https://www[.]roblox[.]rw/games/88738945340571/Would-You-Rather-Countryball-Tower?privateServerLinkCode=11040290185766545005746312904812&game_id=88738945340571&game_name=Would-You-Rather-Countryball-Tower

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:24.694565+00:00

    Investigate available evidence
  21. https://www[.]roblox[.]rw/games/9391468976/HIRED-KILLER-Jujutsu-Shenanigans?privateServerLinkCode=11040290185766545005746312904812&game_id=9391468976&game_name=HIRED-KILLER-Jujutsu-Shenanigans

    Sources: openphish · Last stored retrieval 2026-10-26T04:51:24.817206+00:00

    Investigate available evidence

Methodology and limits

The week starts Monday at 00:00 UTC. The query reads at most 10,000 most recently retrieved item records from URLhaus, OpenPhish and ThreatFox, retains records tagged Africa whose threat label explicitly includes phishing, and groups exact indicator strings across sources. Up to 50 groups are displayed. Ties use alphabetical order, not inferred severity.

Many URLhaus and ThreatFox entries concern malware rather than phishing and are excluded. An item’s retrieval timestamp is not its first malicious activity or victim date. Region tags can be inferred; no country targeting or comprehensive coverage is claimed. The archive updates existing indicators, so this report is a current retrieval-window summary, not an immutable historical incident count. Provider outages and retention affect completeness.

This page regenerates on request from retained public data. No private scan history or personal submissions are published. Suspect destinations are displayed as defanged text, never clickable attack links.

Next steps

Check a suspicious message or URL · Review feed coverage · Build an actionable intelligence workflow