add squad.cl to add-wildcard-domain

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://squad.cl/M3M0cTZMNmg5RTFuOEE=
https://squad.cl/M3g0QjdKMWc0VzdvOVQ=
https://squad.cl/M2c0RTYxOE00azlNOEw=
https://squad.cl/MzEzbTB5MHQwbTZvMVU=
https://squad.cl/M1gySTl0OWQ4cDlDOE8= 
https://squad.cl/M1AzUjBnMjY1cTcxOUw=
https://squad.cl/Mzc0UjN0NG05RDlPM0g=
https://squad.cl/Mzk0ajNhMEswQTdtMng=

Impersonated domain

https://www.tut.ac.za/
https://www.ufh.ac.za/
https://www.ufs.ac.za/
https://www.wsu.ac.za/
https://www.microsoft365.com/
https://www.tiktok.com/

Describe the issue

This domain is now hosting the phishing kit that previously at benyex.cl (#468), lebomashilo[.]co[.]za (#462), havenhills[.]za[.]com (#459), intrinsicisle[.]za[.]com (#452), reluzformaturas[.]com[.]br (#435), abcmueblesbogota[.]com (#432), ergoterapiacaribu[.]ch (#426), ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand