add pescacancun.com to add-wildcard-domain

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://pescacancun.com/M0IzSDNON004eDg5NzA=
https://pescacancun.com/M2ozRjZIM3QycDJOMzI=
https://pescacancun.com/MzkzbTZmMDg0cTlyMTI=
https://pescacancun.com/MnQ4QjVGOVg3STFjNzE=
https://pescacancun.com/M2UzZjY2M1czTzB6OG4=
https://pescacancun.com/MzQzbzY2Mng3YzF1MDI=
https://pescacancun.com/M2gzRzZ6MUM5VTJzOXE=
https://pescacancun.com/M1AxaTZBOFM5YTNjNUI=
https://pescacancun.com/M1UzMzZQM1Q2WjlMMTg=
https://pescacancun.com/M3kxNDNMMmUwVjJuMW8= 
https://pescacancun.com/MkY4NDc4N20wdThBMDY=
https://pescacancun.com/MzQzNjN4OUc3TjVZNjc=
https://pescacancun.com/Mmc2djcwOUU4VDNwNzc=
https://pescacancun.com/MzQzbzY2Mng3YzF1MDI= 
https://pescacancun.com/M0wxajBoN3M2MDRMOWg=
https://pescacancun.com/M1gyWDZuMkQ4ODVLN2Y=
https://pescacancun.com/M1EzMDZmMFA4NDZ3Mmc=
https://pescacancun.com/M0gzMDZSM2YxeTlVNEs=
https://pescacancun.com/M0YzVjY5M2k5MzBpM1Y=
https://pescacancun.com/M3gzNzZVM001bzlwMFk=
https://pescacancun.com/M3EySjdkN0owbTdQMkU=
https://pescacancun.com/M0IzZDVRMnk5TzhqNmU=
https://pescacancun.com/MzEzNTZuM2wzeTN0NjE=
https://pescacancun.com/M3ozTTV3ODY4czZ4M3k=
https://pescacancun.com/MzQzRzRFNmwzbzVwMVc=
https://pescacancun.com/M24zUTZiM083OTFONFM=
https://pescacancun.com/MzMzdzJzNnc3cjFyNUY=

Impersonated domain

https://www.facebook.com/
https://www.betway.co.za
https://ff.garena.com
https://www.shoprite.com
https://www.tut.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that was previously at bkengineersindia[.]com( #405), englishplusmore[.]com(#404), carnesboinobre[.]com[.]br(#398), technowide[.]com[.]tr(#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com(#370 ), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and many others (approximately 120 domains since 2021).

Related external source

Screenshot

Click to expand

[spirillen]

The big wizard have been pushing the magic button.