westernautomobileassembly.com

[g0d33p3rsec]

Blacklist domain as

• Wildcard, The domain should be entirely blacklisted
• Subdomain, We should not blacklist the entire domain, only sub-domains
• Both types, category depended, How to Blacklist, depends on category assign per (sub-)domain

Comments

This site is now hosting the kit that was previously at littleswanaircon[.]com[.]sg, iwan2travel[.]com, applesforfred[.]com, theaerie[.]ca, nico[.]sa, and ajstelecom[.]com[.]mx

Domain records

westernautomobileassembly.com|phishing

Hosts specific records, not used by DNS RPZ firewalls

No response

Screenshots

Screenshot

Links to external sources

https://westernautomobileassembly.com/M3YydzlMOUYxQzR3M1o=
https://westernautomobileassembly.com/M3cyVjliOWwxRDljOVc=
https://westernautomobileassembly.com/M0YydTJvN000ejRqOTg=
https://westernautomobileassembly.com/MzIyMjl0OVk0eDdpN0Y
https://westernautomobileassembly.com/M1IyTjV4OGk5czZYNVE=
https://westernautomobileassembly.com/M2EySzdhOE4zTjJaNVY=
https://westernautomobileassembly.com/M1MyeTlmOVc5NTVMN0w=
https://westernautomobileassembly.com/M3czdTBCMEkwQjc1OHk= 
https://westernautomobileassembly.com/Mmw3WDd3MTc5TDFiNEo=
https://westernautomobileassembly.com/M1UyeTl6OWg2dzBlN0o=
https://westernautomobileassembly.com/M0MyczlZM1MySjBBMUs=
https://westernautomobileassembly.com/M2EzNTBkMHMwYjRpOXk
https://westernautomobileassembly.com/M0UyYjlBODA1cDMxOTI=
https://westernautomobileassembly.com/M2YwZzk2MnYzVjZhNlA=
https://westernautomobileassembly.com/M3cyVzZ3OEIyMTBOOXk=
https://westernautomobileassembly.com/M1QyZDNoOTQxVDNxN20=
https://westernautomobileassembly.com/M1oyUTg2N3U3NDd2N1E= 
https://westernautomobileassembly.com/M2cwVTUxNEIxOTFXM3I=
https://westernautomobileassembly.com/M20zNjBPMDYxQjFiMng=
https://twitter.com/darksamson2/status/1779784028880580627
https://twitter.com/betwaycodes1/status/1779786300289167487

### logs from uBlock Origin

_No response_

[g0d33p3rsec]

Took a look at the root of the domain and noticed this today.

[spirillen]

Well you did catch the, up front... and that is good 👍