Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add abcmueblesbogota.com to add-wildcard-domain #432

Conversation

g0d33p3rsec
Copy link
Contributor

@g0d33p3rsec g0d33p3rsec commented Jun 27, 2024

Phishing Domain/URL/IP(s):

https://abcmueblesbogota.com/Mms2QTJlMEExVzEzNUQ=
https://abcmueblesbogota.com/MzAxTjVJNVo3ZDNNMDc=
https://abcmueblesbogota.com/MzcyUTlDNVc5Njl4NmQ=
https://abcmueblesbogota.com/M0E0cDEwMW8xeTQ5NGc=
https://abcmueblesbogota.com/M3kzRjdQMEU1bzN2NWc=
https://abcmueblesbogota.com/M0ozMzdOMFo1RTNXNVI=
https://abcmueblesbogota.com/M08zWjZ0N3cwbDA1OVU=
https://abcmueblesbogota.com/M20zSDdVMFA1SzNWNXE=
https://abcmueblesbogota.com/M3UzSzdRMHA1RDNyNUo=
https://abcmueblesbogota.com/M3UzUjRiNEk5TjZiNHE=
https://abcmueblesbogota.com/M2Q0TDFQMXIwODJqOVo=
https://abcmueblesbogota.com/M3IzMzUyMFA4TDI4OFg= 
https://abcmueblesbogota.com/M0M0eTFaMXQ0aTc0NlQ=
https://abcmueblesbogota.com/M0k0bjFaMXE1azJyMk8=
https://abcmueblesbogota.com/MW0wbzd4MEI3eTdFMkU=
https://abcmueblesbogota.com/M1QzOTFCOUs1WTNpMDQ=
https://abcmueblesbogota.com/M04yVTlkNm0zaDlxMFk=
https://abcmueblesbogota.com/M3Q0dDE3MTk1VTJ3Mmo=
https://abcmueblesbogota.com/M1czaDFSNUIxUzM3OE8=
https://abcmueblesbogota.com/M0IzeDczMEE1aDNWNUk=
https://abcmueblesbogota.com/M3EzZzcxMHA1VTN6NXA=
https://abcmueblesbogota.com/MzQxRjhaMzEzcjJjM1E=
https://abcmueblesbogota.com/M2szTDcxM2w0ejM3Nk0=
https://abcmueblesbogota.com/M1MzUjdOMGc1cTNhNUg=
https://abcmueblesbogota.com/M1QzejdDMGI1cDNVNU0=
https://abcmueblesbogota.com/MzgzWjNSMmcySDJkNVU=
https://abcmueblesbogota.com/M2UwcjlkMlY3MDIwMWY=
https://abcmueblesbogota.com/M040RjFUMlY5QTVrOVE=
https://abcmueblesbogota.com/M3o0eTB0OXQ4RjkwNHI=
https://abcmueblesbogota.com/MzMzajdMMHY1ZzNiNUQ=
https://abcmueblesbogota.com/M20yVjNEOFI5dzZ3OGU=
https://abcmueblesbogota.com/M0MycThQMlY2Yzh5M2M=
https://abcmueblesbogota.com/MzE0ZTFaMWYySTdCOVE=
https://abcmueblesbogota.com/M1UzazU5NkY4QjFLOGs=
https://abcmueblesbogota.com/M1k0UzFVMkwwZTZVOXQ=
https://abcmueblesbogota.com/M2I0dTFDMmM1eTFBOXY=
https://abcmueblesbogota.com/M0U0djE0MlA1RzUxM3Q=
https://abcmueblesbogota.com/M1EybzI5NjU3STRqMGE=
https://abcmueblesbogota.com/M2U0dzFIMTA0YTB3NXA=
https://abcmueblesbogota.com/M1MzSjlyOXMwcjVROXQ=
https://abcmueblesbogota.com/M2wzVDlmM0M5WjVXMng=
https://abcmueblesbogota.com/M2c0RjF4MTM1NzNCMzk=
https://abcmueblesbogota.com/MzIzNDhTNzY0ZDduNnU=
https://abcmueblesbogota.com/M2ozUjFpNXoxWDNrOEQ=
https://abcmueblesbogota.com/M3A0UDF0MVc5Mjg5MDk=
https://abcmueblesbogota.com/M2szMTczMEk1eTNLNUY=
https://abcmueblesbogota.com/M0kzSTFkN00yVTU0NU0=
https://abcmueblesbogota.com/M1I0NTE3MWM2dzNONXc=
https://abcmueblesbogota.com/Mlg4bTNKMVQwMDFQODA=
https://abcmueblesbogota.com/MzQzUTcxOUw0ZjQ4MUc=
https://abcmueblesbogota.com/MzUxWTNIMlUwSzJzMUY=
https://abcmueblesbogota.com/MzczMjFyNEM5QzhsOXA=
https://abcmueblesbogota.com/M1EyaDdBMnM1NDdkN1c=
https://abcmueblesbogota.com/MzIzZDczMFk1cDNONUQ=
https://abcmueblesbogota.com/M1IyTTcyMnU1RzdtN2Q=
https://abcmueblesbogota.com/M0EzcTdVMVoxZjFoNUo=
https://abcmueblesbogota.com/M20yWDlNM2UwODVOMko=
https://abcmueblesbogota.com/MzI0VzFGMUs4UDlmMXc=
https://abcmueblesbogota.com/M240ZzFGM0M4eTFjOHg=
https://abcmueblesbogota.com/MzYzVTltMkQ3djI2MEI=
https://abcmueblesbogota.com/M0kySDdvOGs2dzZlM0s=
https://abcmueblesbogota.com/M1QzMDlnOWcyUjN5OW8=
https://abcmueblesbogota.com/M2cxUTU1NWk2djNyMFQ=
https://abcmueblesbogota.com/M0Y0NDFpMmc1MjBWNmo=
https://abcmueblesbogota.com/M3kzNTFjMXIyUDlXOUk=
https://abcmueblesbogota.com/MmI5RTlzN1MxZjR4ODg=
https://abcmueblesbogota.com/M040YjFPNGc5djJiODA=
https://abcmueblesbogota.com/Mzc0QzE3NGc5cTNjNjg=
https://abcmueblesbogota.com/M0s0ejFPMkw3bzkyNnY=
https://abcmueblesbogota.com/M20zWTZkMWE0dTF5NDQ=
https://abcmueblesbogota.com/M3E0YTFVMXo0djBnNUY=
https://abcmueblesbogota.com/M280eTFyNG01WDBJNjk=
https://abcmueblesbogota.com/MzY0QjFkNHo1ODBFOTc=

Impersonated domain

https://facebook.com/
https://www.instagram.com/
https://www.betway.co.za
https://www.1voucher.co.za/
https://ff.garena.com/
https://www.ufs.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that previously at ergoterapiacaribu.ch (#426), ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand

image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
7e9983b8-cbbc-4a27-9b18-318ac42bc2ab
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
13a36ea9-a2a0-4da9-99ce-b384413de338
00a3ac03-6dad-4814-9c4d-3aa23aac3138
66d1c6e8-c7a7-48c8-a696-553ef02b156d
image

spirillen added a commit to mypdns/matrix that referenced this pull request Jun 27, 2024
@spirillen spirillen merged commit 2ecfb4c into mitchellkrogza:main Jun 27, 2024
1 check passed
@g0d33p3rsec
Copy link
Contributor Author

I filed an abuse complaint with Namecheap on 6/28. This morning, when attempting to rescan some of the previously identified malicious URIs, I was met with a response indicating that the account has been suspended.
b43482c8-f1e3-4b47-82e3-f23956d29ebd

@g0d33p3rsec g0d33p3rsec deleted the add-abcmueblesbogota.com-to-wildcard-list branch July 2, 2024 13:09
@spirillen
Copy link
Collaborator

That is good news, however let's wait a couple of days to remove it and see if it stays off

@spirillen
Copy link
Collaborator

PS: really like you took the contact to the hosting company 🥇

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants