afis[.]blackwidow[.]org[.]za

This domain, afis.blackwidow.org.za, is flagged as an active high-risk phishing site targeting console login credentials. Registered on March 11, 2026, through xneelo (Pty) Ltd, the domain resolves to IP address 102.219.40.123 and presents a page titled 'Log in - CONSOLE.' The exact nature of the console being mimicked is not yet confirmed, as no specific brand or platform is identified in available data. The site uses a Let's Encrypt SSL certificate, which does not indicate legitimacy but is commonly employed by threat actors to appear secure. Analysis indicates the domain is currently active and appears on at least one security blocklist. Ten of ninety-five security vendors on VirusTotal have flagged this domain, though this detection rate does not confirm the full scope of malicious activity. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk classification. Defenders should treat this domain as hostile infrastructure and implement blocking at the DNS or network level. Further investigation into the resolved IP address and associated domains may reveal additional related threats. No evidence of takedown or mitigation efforts is present as of July 12, 2026.