pescacancun.com

[g0d33p3rsec]

Blacklist domain as

• Wildcard, The domain should be entirely blacklisted
• Subdomain, We should not blacklist the entire domain, only sub-domains
• Both types, category depended, How to Blacklist, depends on category assign per (sub-)domain

Comments

This domain is now hosting the phishing kit that was previously at bkengineersindia[.]com, englishplusmore[.]com, carnesboinobre[.]com[.]br, technowide[.]com[.]tr, jestertunes[.]com, safecartusa[.]com, foreverfarley[.]com, azezieldraconous[.]com, westernautomobileassembly[.]com, littleswanaircon[.]com[.]sg, iwan2travel[.]com, applesforfred[.]com, theaerie[.]ca, nico[.]sa, ajstelecom[.]com[.]mx, and many others (approximately 120 domains since 2021).

Domain records

pescacancun.com|phishing

Hosts specific records, not used by DNS RPZ firewalls

No response

Screenshots

Screenshot

Links to external sources

https://pescacancun.com/M0IzSDNON004eDg5NzA=
https://pescacancun.com/M2ozRjZIM3QycDJOMzI=
https://pescacancun.com/MzkzbTZmMDg0cTlyMTI=
https://pescacancun.com/MnQ4QjVGOVg3STFjNzE=

### logs from uBlock Origin

_No response_