add-ergoterapiacaribu.ch-to-add-wildcard-domain

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://ergoterapiacaribu.ch/MlM3RDNDMm0zNTQwN3g=
https://ergoterapiacaribu.ch/M3IyZDlWMlc3TzZDNVo=
https://ergoterapiacaribu.ch/M2wzRzk2MnM3VzJxMEg=
https://ergoterapiacaribu.ch/M2oyZDNVNno2azZjOGc=
https://ergoterapiacaribu.ch/M1UzRTRiNzExcTRHMkc=
https://ergoterapiacaribu.ch/M0c0czA4N284TjJzMVM=
https://ergoterapiacaribu.ch/M1Y0eDA0MUEzZjk1Nk4=
https://ergoterapiacaribu.ch/M240UjAyN1M4NDhCMnM=
https://ergoterapiacaribu.ch/MzAzMDZoOWY5Sjd6NU8=
https://ergoterapiacaribu.ch/M2YzTjFlNEc4RzFtMzQ=
https://ergoterapiacaribu.ch/M1MwUDl5MjQ3UDJGMXk=
https://ergoterapiacaribu.ch/M0M0MDBSOHk1QzBKMUQ=
https://ergoterapiacaribu.ch/M28zMDZ6MkQySzljM3U=
https://ergoterapiacaribu.ch/M0kyWTljOTYzejQ4OFk=

Impersonated domain

http://www.mauritel.mr/
https://www.instagram.com/
https://www.betway.co.za
https://ottvoucher.com/
https://www.tut.ac.za/
https://www.ufs.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that previously at ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand