add lebomashilo.co.za to wildcard list

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://lebomashilo.co.za/M20zSDV3Mk8zaTJIOGs= 
https://lebomashilo.co.za/M24xbzNaMlowVTI2MTc=
https://lebomashilo.co.za/M0g0MjNiNmM2ZjV3OW0=
https://lebomashilo.co.za/MzgyYTkyOWc4WTdlMFA=
https://lebomashilo.co.za/M1o0VTJHNHg1RTFEOE0=
https://lebomashilo.co.za/M1U0cTNBOEI5YTJhNFg= 
https://lebomashilo.co.za/MU8wQzdxMHc3bDdTMno=
https://lebomashilo.co.za/M2Q0djVGNXc2ODMzOXM=
https://lebomashilo.co.za/M2YwMTlMMVA1VjFGMzA=

Impersonated domain

https://www.betway.co.za
https://www.shoprite.co.za/

Describe the issue

This domain is now hosting the phishing kit that previously at havenhills.za.com (#459), intrinsicisle[.]za[.]com (#452), reluzformaturas.com.br (#435), abcmueblesbogota[.]com (#432), ergoterapiacaribu[.]ch (#426), ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand

[spirillen]

What are you doing up this late... it's 4 in the morning

[g0d33p3rsec]

What are you doing up this late... it's 4 in the morning

It was about 10 pm here when I made the addition, right before calling it a night.

[spirillen]

You better run dpkg-reconfigure tzdata 😃