add benyex.cl to add-wildcard-domain

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://benyex.cl/MzUwZTVaOWUyWjhPNDc=
https://benyex.cl/M2k0ZDJCNHQ1NjFWOEw=
https://benyex.cl/MjA3ZjBqMjU5VDBCNTg=
https://benyex.cl/MzgxeTN6MlEwWjJIMUE=
https://benyex.cl/M0M0dTZaNFAyUzFWNEU=
https://benyex.cl/MlM4STM3M0U0YzFlOGw= 
https://benyex.cl/M2E0SDJvMWM1ejNiNms=
https://benyex.cl/M3I0ZjZRNEkyNzBlM2U= 
https://benyex.cl/M0c0bzZZNG01NjM4MG4=
https://benyex.cl/M0U0RTZxNGwyTjBoM1I=
https://benyex.cl/M1Q0eDZXNFAyazRFNGo=
https://benyex.cl/M2szUzZHMlMyWDVWNTI=
https://benyex.cl/M2MzVjZmMjEySDVTNXQ=
https://benyex.cl/M2EzNzZ5MkoyeTVZNVM=
http://benyex.cl/M2czTzYxMnUyYzVxNUs=
https://benyex.cl/MjE4UzNEMVg0bDBFN2Y=
https://benyex.cl/M0cxVjRYNXc1VTI0OGQ=
https://benyex.cl/M0Y0NDBuOUExUjZNOUU=
https://benyex.cl/MzQxdzNuMmYwUDJWMVE=
https://benyex.cl/M0IzdDBhM20zcDdHNjY=
https://benyex.cl/M2E0cTN6OG85bzJoNEg=

Impersonated domain

https://facebook.com/
https://www.instagram.com/
https://www.betway.co.za
https://crossfire.z8games.com/
https://www.tut.ac.za/
https://www.ufh.ac.za/
https://www.ufs.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that previously at lebomashilo[.]co[.]za (#462), havenhills[.]za[.]com (#459), intrinsicisle[.]za[.]com (#452), reluzformaturas[.]com[.]br (#435), abcmueblesbogota[.]com (#432), ergoterapiacaribu[.]ch (#426), ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand