nico.sa - Githubissues

g0d33p3rsec commented 7 months ago

Blacklist domain as

[X] Wildcard, The domain should be entirely blacklisted
[ ] Subdomain, We should not blacklist the entire domain, only sub-domains
[ ] Both types, category depended, How to Blacklist, depends on category assign per (sub-)domain

Comments

This domain is now hosting the phishing kit that was previously hosted at ajstelecom[.]com[.]mx

Domain records

nico.sa|phishing

Hosts specific records, not used by DNS RPZ firewalls

No response

Screenshots

Screenshot

![image](https://github.com/mypdns/matrix/assets/108126637/07430ddf-65fb-4755-b5c4-babd05087519) ![image](https://github.com/mypdns/matrix/assets/108126637/a2b17e89-d387-4cc5-b394-d46ad7b5408f)

Links to external sources

https://nico.sa/M24yYzA5MUMyODl2NGQ=
https://urlscan.io/result/4372e742-07a8-4d02-ad1e-21d9d86cb169/
https://nico.sa/M3IyazdUOEsyRDdrNjg=
https://urlscan.io/result/66ff3c11-e284-413a-bf59-5e84af87bcfa/



### logs from uBlock Origin

_No response_

g0d33p3rsec commented 7 months ago

See #450 for samples from the previous host.

spirillen commented 7 months ago

Added in https://github.com/mypdns/matrix/commit/6b4161527a3dd57aaf0ad1178215452f0d575c74

mypdns / matrix