add applesforfred.com to add-wildcard-domain

[g0d33p3rsec]

Domain/URL/IP(s) where you have found the Phishing:

https://applesforfred.com/Mk44bTI2OUs3YjVXMEI=
https://applesforfred. com/M0MwNTZyNTcyWTdTNUQ=
https://applesforfred.com/M1MybjROMngwMDdnNjM=
https://applesforfred.com/M2EyVDdkOVMxODRLMW4=
https://applesforfred.com/M2EyWjRTNjcxcD
https://applesforfred.com/MzEyTzhDMU03eThoMkU=
https://applesforfred.com/M1EyRDg0MWs5NDBNOGo=
https://applesforfred.com/M0QyZzhjMWU1eTdNNWQ=
https://applesforfred.com/M2gyZDZFNWc1UDRYM2g=
https://applesforfred.com/Mlo4SzNMM3o2TjVmN3Q=
https://applesforfred.com/M3YyZTNNNWMwYjc5NXY=
https://applesforfred.com/M2IySDZlMjQzVTBxNk4=
https://applesforfred.com/M28ySjh4MU81cjkzNFo=
https://applesforfred.com/M3QySzVJN3I0cjJNMGM=
https://applesforfred.com/MW43czh3MnI1RTAxMWI=
https://applesforfred.com/M0EyUTh4MGY4NDFVMVU=
https://applesforfred.com/M2oycDhPMW02VzlwN3o=
https://applesforfred.com/M1YyTjdYMzEwZjlHNmQ=
https://applesforfred.com/MzMyQzQ3MmcwVzduNmQ=
https://applesforfred.com/MzcyQThHMnYwRTU2MEE=
https://applesforfred.com/M0sxZTdTN0U1QjJsMXo=
https://applesforfred.com/M0UyZDdXNGMwaTA3NFQ=
https://applesforfred.com/M1oyMThPMTAzWTJ3MWg=
https://applesforfred.com/M2oyOTdjOHM2bDZoM2s=
https://applesforfred.com/MzcyNDhaMjMyWjZPMUY=
https://applesforfred.com/M3cxRDFJMGU0MDlWNlE=
https://applesforfred.com/M1YxRTM1MlcwcDJ4MWw=
https://applesforfred.com/M0UxdjdhNVc4cDdXNno=
https://applesforfred.com/M3UyaTd4OVUwTjlINWU=
https://applesforfred.com/M1UyMzdDOU4xRzRrME8=
https://applesforfred.com/M1QySjdBOVUwbDY0Nkk=
https://applesforfred.com/M3gybDZ0OE4yYzBTOWY=

Impersonated domain

https://www.office.com/
https://facebook.com/
https://www.betway.co.za
https://ff.garena.com
https://www.ezaga.co.za/
https://www.ul.ac.za/
https://www.mandela.ac.za/
https://www.tut.ac.za/
https://www.ufh.ac.za/
https://www.ufs.ac.za/
https://ww1.ukzn.ac.za/

Describe the issue

This site is now hosting the kit that was previously at theaerie[.]ca (see #367) , nico[.]sa (#366 ), and ajstelecom[.]com[.]mx (#362).

Related external source

https://urlscan.io/result/e68d31cf-d683-46d9-9375-1ab0e97cb474/
https://urlscan.io/result/1d2bd1da-dbbf-4d0b-b1b9-e0bb5fac0350/
https://urlscan.io/result/f428dfee-1231-4bd7-a647-ca12c5ef7ef9/
https://urlscan.io/result/1689e1d8-c05b-4697-b752-254f89435bac/
https://urlscan.io/result/c557612d-f3c1-46aa-914f-f5369cfa5769/
https://radar.cloudflare.com/scan/65df1877-d881-4105-abb1-0360dca14b9b/
https://urlscan.io/result/346991b0-902f-4f6e-8c44-414ff014b7f6/
https://urlscan.io/result/c30165d7-e218-4b74-aea3-58cdb136813e/
https://urlscan.io/result/51c9e345-6c8e-42f3-9f88-09db6db269b0/
https://radar.cloudflare.com/scan/41eb3837-ab01-46ef-8a06-fe8670cfbc01/
https://radar.cloudflare.com/scan/aa897d89-9388-4280-b18e-7200306074e2/
https://radar.cloudflare.com/scan/f3d34ecd-3512-436d-bbf1-202772f61a5f/
https://urlscan.io/result/54f7c50d-c6ef-43a7-93fe-062960e7e656/
https://radar.cloudflare.com/scan/6f4ff40a-7c0e-4212-96b9-4a28918ea100/
https://urlscan.io/result/bb76e425-05f3-43c2-a6d5-03086b6d63c6/
https://urlscan.io/result/9d854f49-504c-4bc4-9fc3-296a8bdf8d06/
https://urlscan.io/result/abab4347-248d-4024-b561-b2ea66c06e89/
https://urlscan.io/result/6e728d91-880a-4709-8642-311fe74ffdf5/
https://urlscan.io/result/37fba83c-7125-4b6d-804b-013d7a4c3301/
https://urlscan.io/result/aa2b7168-09cf-4c6b-baad-4efdb02dcff9/
https://urlscan.io/result/ca91d8c2-30bf-46cd-b676-6d2a884e97f9/
https://urlscan.io/result/b0b396ef-6fc9-4fbe-b270-9b0d35de2575/
https://urlscan.io/result/a3505718-0c1e-4581-8d7a-d4c1ac4c5ff0/
https://urlscan.io/result/a18f4447-ac61-45f6-bc82-eb0abc662246/
https://urlscan.io/result/8a3b789f-4d2f-47e9-b3aa-01ffec1cd1a1/
https://urlscan.io/result/be800305-8c46-470b-b712-8b750457bf60/
https://urlscan.io/result/950aeb59-99f1-4235-b33e-6b33a1984ce5/
https://urlscan.io/result/6e016a47-d1b2-4b4c-b377-8557736ce140/
https://urlscan.io/result/4d362f6d-5e04-4812-94a5-5fc1e5608db6/
https://urlscan.io/result/2be09ac0-e3fa-4612-88fa-a68290fd0243/
https://urlscan.io/result/46adda97-3881-4636-8df5-c968d2c714c0/
https://urlscan.io/result/4c962dd7-6ea6-466a-8924-1f7f5734f779/

Screenshot

Click to expand