add abcmueblesbogota.com to add-wildcard-domain

[g0d33p3rsec]

Phishing Domain/URL/IP(s):

https://abcmueblesbogota.com/Mms2QTJlMEExVzEzNUQ=
https://abcmueblesbogota.com/MzAxTjVJNVo3ZDNNMDc=
https://abcmueblesbogota.com/MzcyUTlDNVc5Njl4NmQ=
https://abcmueblesbogota.com/M0E0cDEwMW8xeTQ5NGc=
https://abcmueblesbogota.com/M3kzRjdQMEU1bzN2NWc=
https://abcmueblesbogota.com/M0ozMzdOMFo1RTNXNVI=
https://abcmueblesbogota.com/M08zWjZ0N3cwbDA1OVU=
https://abcmueblesbogota.com/M20zSDdVMFA1SzNWNXE=
https://abcmueblesbogota.com/M3UzSzdRMHA1RDNyNUo=
https://abcmueblesbogota.com/M3UzUjRiNEk5TjZiNHE=
https://abcmueblesbogota.com/M2Q0TDFQMXIwODJqOVo=
https://abcmueblesbogota.com/M3IzMzUyMFA4TDI4OFg= 
https://abcmueblesbogota.com/M0M0eTFaMXQ0aTc0NlQ=
https://abcmueblesbogota.com/M0k0bjFaMXE1azJyMk8=
https://abcmueblesbogota.com/MW0wbzd4MEI3eTdFMkU=
https://abcmueblesbogota.com/M1QzOTFCOUs1WTNpMDQ=
https://abcmueblesbogota.com/M04yVTlkNm0zaDlxMFk=
https://abcmueblesbogota.com/M3Q0dDE3MTk1VTJ3Mmo=
https://abcmueblesbogota.com/M1czaDFSNUIxUzM3OE8=
https://abcmueblesbogota.com/M0IzeDczMEE1aDNWNUk=
https://abcmueblesbogota.com/M3EzZzcxMHA1VTN6NXA=
https://abcmueblesbogota.com/MzQxRjhaMzEzcjJjM1E=
https://abcmueblesbogota.com/M2szTDcxM2w0ejM3Nk0=
https://abcmueblesbogota.com/M1MzUjdOMGc1cTNhNUg=
https://abcmueblesbogota.com/M1QzejdDMGI1cDNVNU0=
https://abcmueblesbogota.com/MzgzWjNSMmcySDJkNVU=
https://abcmueblesbogota.com/M2UwcjlkMlY3MDIwMWY=
https://abcmueblesbogota.com/M040RjFUMlY5QTVrOVE=
https://abcmueblesbogota.com/M3o0eTB0OXQ4RjkwNHI=
https://abcmueblesbogota.com/MzMzajdMMHY1ZzNiNUQ=
https://abcmueblesbogota.com/M20yVjNEOFI5dzZ3OGU=
https://abcmueblesbogota.com/M0MycThQMlY2Yzh5M2M=
https://abcmueblesbogota.com/MzE0ZTFaMWYySTdCOVE=
https://abcmueblesbogota.com/M1UzazU5NkY4QjFLOGs=
https://abcmueblesbogota.com/M1k0UzFVMkwwZTZVOXQ=
https://abcmueblesbogota.com/M2I0dTFDMmM1eTFBOXY=
https://abcmueblesbogota.com/M0U0djE0MlA1RzUxM3Q=
https://abcmueblesbogota.com/M1EybzI5NjU3STRqMGE=
https://abcmueblesbogota.com/M2U0dzFIMTA0YTB3NXA=
https://abcmueblesbogota.com/M1MzSjlyOXMwcjVROXQ=
https://abcmueblesbogota.com/M2wzVDlmM0M5WjVXMng=
https://abcmueblesbogota.com/M2c0RjF4MTM1NzNCMzk=
https://abcmueblesbogota.com/MzIzNDhTNzY0ZDduNnU=
https://abcmueblesbogota.com/M2ozUjFpNXoxWDNrOEQ=
https://abcmueblesbogota.com/M3A0UDF0MVc5Mjg5MDk=
https://abcmueblesbogota.com/M2szMTczMEk1eTNLNUY=
https://abcmueblesbogota.com/M0kzSTFkN00yVTU0NU0=
https://abcmueblesbogota.com/M1I0NTE3MWM2dzNONXc=
https://abcmueblesbogota.com/Mlg4bTNKMVQwMDFQODA=
https://abcmueblesbogota.com/MzQzUTcxOUw0ZjQ4MUc=
https://abcmueblesbogota.com/MzUxWTNIMlUwSzJzMUY=
https://abcmueblesbogota.com/MzczMjFyNEM5QzhsOXA=
https://abcmueblesbogota.com/M1EyaDdBMnM1NDdkN1c=
https://abcmueblesbogota.com/MzIzZDczMFk1cDNONUQ=
https://abcmueblesbogota.com/M1IyTTcyMnU1RzdtN2Q=
https://abcmueblesbogota.com/M0EzcTdVMVoxZjFoNUo=
https://abcmueblesbogota.com/M20yWDlNM2UwODVOMko=
https://abcmueblesbogota.com/MzI0VzFGMUs4UDlmMXc=
https://abcmueblesbogota.com/M240ZzFGM0M4eTFjOHg=
https://abcmueblesbogota.com/MzYzVTltMkQ3djI2MEI=
https://abcmueblesbogota.com/M0kySDdvOGs2dzZlM0s=
https://abcmueblesbogota.com/M1QzMDlnOWcyUjN5OW8=
https://abcmueblesbogota.com/M2cxUTU1NWk2djNyMFQ=
https://abcmueblesbogota.com/M0Y0NDFpMmc1MjBWNmo=
https://abcmueblesbogota.com/M3kzNTFjMXIyUDlXOUk=
https://abcmueblesbogota.com/MmI5RTlzN1MxZjR4ODg=
https://abcmueblesbogota.com/M040YjFPNGc5djJiODA=
https://abcmueblesbogota.com/Mzc0QzE3NGc5cTNjNjg=
https://abcmueblesbogota.com/M0s0ejFPMkw3bzkyNnY=
https://abcmueblesbogota.com/M20zWTZkMWE0dTF5NDQ=
https://abcmueblesbogota.com/M3E0YTFVMXo0djBnNUY=
https://abcmueblesbogota.com/M280eTFyNG01WDBJNjk=
https://abcmueblesbogota.com/MzY0QjFkNHo1ODBFOTc=

Impersonated domain

https://facebook.com/
https://www.instagram.com/
https://www.betway.co.za
https://www.1voucher.co.za/
https://ff.garena.com/
https://www.ufs.ac.za/
https://www.wsu.ac.za/

Describe the issue

This domain is now hosting the phishing kit that previously at ergoterapiacaribu.ch (#426), ijconnects[.]com (#421), cbcaps[.]shop (#417), bersowir[.]org (#416), brunotasso[.]com[.]br (#413), wisbechguide[.]uk (#408), pescacancun[.]com (#406), bkengineersindia[.]com (#405), englishplusmore[.]com (#404), carnesboinobre[.]com[.]br (#398), technowide[.]com[.]tr (#396), jestertunes[.]com (#393), safecartusa[.]com (#391), foreverfarley[.]com (#387), azezieldraconous[.]com (#381), westernautomobileassembly[.]com (#376) , littleswanaircon[.]com[.]sg (#372), iwan2travel[.]com (#370), applesforfred[.]com (#369), theaerie[.]ca (#367), nico[.]sa (#366), ajstelecom[.]com[.]mx (#362), and others (more than 130 domains since 2021).

Related external source

Screenshot

Click to expand

[g0d33p3rsec]

I filed an abuse complaint with Namecheap on 6/28. This morning, when attempting to rescan some of the previously identified malicious URIs, I was met with a response indicating that the account has been suspended.

[spirillen]

That is good news, however let's wait a couple of days to remove it and see if it stays off

[spirillen]

PS: really like you took the contact to the hosting company 🥇