Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add jestertunes[.]com to add-wildcard-domain #393

Conversation

g0d33p3rsec
Copy link
Contributor

@g0d33p3rsec g0d33p3rsec commented May 1, 2024

Phishing Domain/URL/IP(s):

https://jestertunes.com/M0MwSDduOUI3VjdyOWI=
https://jestertunes.com/M1gzZDF5NkI4MzZLMmw=
https://jestertunes.com/M3MzWDEzNmw4UDY2MjE=
https://jestertunes.com/M2YzaDF0NjM4RzZwMjA=
https://jestertunes.com/MzgzcjFrNjc4STYyMjc=
https://jestertunes.com/M0ozMDFTNkU4azZIMms=
https://jestertunes.com/M3QxOTMzMjQwaDI0MWI=
https://jestertunes.com/M2wyVjdrM2c1SzhpOFM=
https://jestertunes.com/M0czbTBHN3E0dTMyMHU=
https://jestertunes.com/M1UyejhBNXM4cDhyOXg=
https://jestertunes.com/M3kyZjZ0NTc5ajJQN3o=
https://jestertunes.com/M04yRzZSNUg5NjJ5N3k=
https://jestertunes.com/M08zQzFUODMyYTcxNlU=
https://jestertunes.com/MzYzVjFLNG0wdDZmNXg=
https://jestertunes.com/M0ozYTFwMGQ4QjZVMUU=
https://jestertunes.com/M1YyRDhQMjMwcTVlMG8=
https://jestertunes.com/M0ozcTAwNlYyeTB5NlI=
https://jestertunes.com/M3kzUzEyN0cwOThhN1o
https://jestertunes.com/M2IyeTJDNk8xNjRQOFY=
https://jestertunes.com/M0wzczJpMFMyYTFWMXM=
https://jestertunes.com/M0MzTjFmOW81TzRGNXE=
https://jestertunes.com/M1EzbDFuOUswZzAxNkk=
https://jestertunes.com/M00zcjBOMWk1UjlTNjg=
https://jestertunes.com/MzEzbDFCOWEydjFhN3g=
https://jestertunes.com/M3kzQTJUMHgxQjlHODY=
https://jestertunes.com/M2kzNzFxN0M0UjNpOVo=
https://jestertunes.com/M2MzcDFlN2E4bTlKM3Y=
https://jestertunes.com/M1kxaThJNEo5cDVBM1o=
https://jestertunes.com/M0czRjFRODczdzZjMks=
https://jestertunes.com/M3MzbjFxOXgwZzlYMWs= 
https://jestertunes.com/MkE4MzVRMXI5SzQ3OUY=
https://jestertunes.com/M1oyYjlKOFkxTTBjNVE=
https://jestertunes.com/M24zcTIzMHgxbjlaODA=
https://jestertunes.com/M20xZjV0NVc3ZDNMMHk=
https://jestertunes.com/M3MzZDJVMHExSzNVMkU=
https://jestertunes.com/MnU5NzFxMFY5TzhlNGs=
https://jestertunes.com/M0YycTZoNTMyQTR4OXA=
https://jestertunes.com/M2oxOTMwM0c5bDRXNlI=
https://jestertunes.com/M0ozRjBzOE42QTFoOVo= 
https://jestertunes.com/Mkw4STlYNjk5RDRXN0Q=
https://jestertunes.com/M0czUzJHMXc3bjJDNlY=
https://jestertunes.com/Mjc5dDF0NEU0ZTBRNnE=
https://jestertunes.com/MzAzSzFNODA5aDdRMGE=
https://jestertunes.com/M0YzazF6OE00YzJuMEk=
https://jestertunes.com/M0ozMzI5MWYybjlwMHU=
https://jestertunes.com/M1EzcDI4MUs3RDRNMUM=
https://jestertunes.com/MzYxazg4NFA5ajJEMU4=
https://jestertunes.com/M24xTTUzNW83SDNBMGM=
https://jestertunes.com/M2EzcjBYNkU4dTB0M0o=
https://jestertunes.com/M1kyRTF3MGg5WjhmNWo= 
https://jestertunes.com/M2wzcjI2MEowYjNsNTg=

Impersonated domain

https://www.microsoft.com
https://facebook.com/
https://minepi.com/
https://www.betway.co.za
https://ff.garena.com
https://www.tut.ac.za/
https://ww1.ukzn.ac.za/
https://www.uwc.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that was previously at safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com(#370 ), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), and ajstelecom[.]com[.]mx (#362)

Related external source

Screenshot

Click to expand

image
image
image
image
image
image
image
image
image
image
image
5942f6aa-2639-4b63-9fe4-eaefd27cf07c
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image

@spirillen spirillen merged commit 4e28c71 into mitchellkrogza:main May 1, 2024
@g0d33p3rsec g0d33p3rsec deleted the add-jestertunes.com-to-wildcard-domain branch May 3, 2024 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants