Abdul-Itas/Africa-Phishing-IOCs

# Africa Phishing IOCs 🛡️ A community-driven repository of phishing Indicators of Compromise (IOCs) targeting users in Nigeria and across Africa. Maintained by Abdulmajid Imam | Powered by PhishRadar --- ## What This Is This repository tracks phishing domains, malicious sender addresses, and attack patterns specifically targeting African users — Nigerian banks, fintechs, government agencies, and telcos. Most global threat intelligence feeds don't cover African-specific phishing campaigns. This repository exists to close that gap. --- ## Repository Structure ``` Africa-Phishing-IOCs/ ├── iocs/ │ ├── domains.txt # Confirmed phishing domains │ ├── emails.txt # Confirmed phishing sender addresses │ └── patterns.json # Nigerian phishing signature patterns ├── CONTRIBUTING.md # How to contribute └── README.md # This file ``` --- ## IOC Categories ### 🏦 Bank Impersonation Phishing domains and emails impersonating Nigerian and African banks including GTBank, Zenith Bank, Access Bank, First Bank, UBA, FCMB, Ecobank, and others. ### 💳 Fintech Fraud Domains impersonating OPay, PalmPay, Kuda, Flutterwave, Paystack, Moniepoint, Chipper Cash, and other African fintechs. ### 🏛️ Government Impersonation Fake CBN directives, EFCC threats, FIRS tax notices, NIMC NIN update requests, and other government body impersonation. ### 📱 Telco Scams Fake prize notifications from MTN, Airtel, Glo, and 9mobile. ### 🆔 BVN/NIN Fraud Phishing campaigns requesting Bank Verification Number (BVN) or National Identification Number (NIN) updates. ### 💰 Advance Fee Fraud (419) Inheritance claims, next-of-kin requests, lottery winners, and other advance fee fraud patterns. --- ## Live Threat Intelligence API PhishRadar provides a free public API for querying these IOCs: ```bash # Check a URL or domain curl "phishradar.onrender.com" # Get the full IOC feed curl "phishradar.onrender.com …