2024-11-09 - Tech Support Scam - Phishing Capmapign Observation Alert

78 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 78 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://habs4-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://menscravery[.]life/gddtykditdtuc/68tre8fs6wfqaeg6qarfscvyfd67qa/6rdfavzfac8yjzsrgcua6zjsfcvusj/
  •  hxxps://yellow2-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-721-7996
  •  hxxps://jjkkxzxss767zzsxxszsa[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-206-9254
  •  hxxps://mmmnjp[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://aytfg[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://aytfg[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://textsfromhokeysv[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://varioussexocbeing[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://agyaggbt5555[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://081102kasdjsasdjaiusdnij[.]z24[.]web[.]core[.]windows[.]net/21102024info[.]html
  •  hxxps://sjgtgg5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://bettersxbconsume[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://notymmm[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://heeanchbsnahpltaleftjub-tihbforethebintaleptb-todednowitirdswin[.]blr1[.]cdn[.]digitaloceanspaces[.]com/Rteump93/index[.]html
  •  hxxps://rishi55[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi55[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://duskkk8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jhsah-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://jhsah-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://main[.]dackslcomleot[.]amplifyapp[.]com/
  •  hxxps://sitegetsregulations[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://phn9[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://missavprocess[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://missavtimely[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://helpwindowssupport[.]pages[.]dev/Wi0n62HelpErr0Amr062/
  •  hxxps://phn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://yghftghjh2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://yghftghjh2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://alia6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://alia6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://missavimproving[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vfdgftrtdr10-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://vfdgftrtdr10-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://techsupport-ev2[.]pages[.]dev/
  •  hxxps://mdhmgsy2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mdhmgsy2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://stocksupp0rtsale[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asfdsfhs03dfhfasfsdgafga[.]z24[.]web[.]core[.]windows[.]net/sfdgsg03[.]html
  •  hxxps://zhxbdkbxqnammp6u3itsgc6zvjwggu6em6ff6ddu2vncbgvqqv6qvs3[.]pages[.]dev/smart89/
  •  hxxps://windowsexsupport009[.]pages[.]dev/Wi0n62HelpErr0Amr062/
  •  hxxps://mmmjjuuii[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ill3[.]marketmingleusa[.]store/_Fm7-alert[.]mp3
  •  hxxps://sm4ruaus0xg2[.]z13[.]web[.]core[.]windows[.]net/?zpbid=78432_a67cbb89-9d2f-11ef-8f9e-9f2e0f8686de
  •  hxxps://phn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ca110mac0supp0rtn0w[.]pages[.]dev/
  •  hxxps://kavasaka12[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-294-2701
  •  hxxps://clauseperiodwsb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://servicesexclusively[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sadbhavnews[.]b-cdn[.]net/
  •  hxxps://gvytvv-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gvytvv-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://egrkymas9hivq[.]pages[.]dev/smart89/
  •  hxxps://main[.]d1ah7a5wvajmk5[.]amplifyapp[.]com/
  •  hxxps://alia9[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://alia9[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://o4cnafnszhb[.]pages[.]dev/smart89/
  •  hxxps://formatwebindexed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gentle-meadow-034644210[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://mediaretrospectvalues[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fbotkm2t7ns92fbfip9[.]pages[.]dev/smart89/
  •  hxxps://inf0egtebwqms11a[.]pages[.]dev/
  •  hxxps://ytdcfwetywems11[.]pages[.]dev/
  •  hxxps://favorablydefender[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://app-updater-er000r[.]pages[.]dev/folder1/
  •  hxxps://microsoft-device-23121[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://yghftghjh44-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://main[.]d10ca905gfz49h[.]amplifyapp[.]com/
  •  hxxps://missavevolved[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://endeavorawaynhed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asadttt[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://asadttt[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://notymmm-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://notymmm-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://notymmm-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://notymmm-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://vfdgftrtdr10[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://vfdgftrtdr10[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://remarkedimage[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ketuse00morelink081[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://iiiijjuuyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://duskkk6-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk6-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://desktop-errors-1442[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://main[.]d1ivw50h15ceql[.]amplifyapp[.]com/
  •  hxxps://engagesxcmedia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bryancoli777[.]github[.]io/popup/
  •  hxxps://desktopt-error01021-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mmmnnnbbgttrr-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mmmnnnbbgttrr-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://main[.]d3r8bmy88sgskd[.]amplifyapp[.]com/
  •  hxxps://kahsypp4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://getsoffensemissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://device-network-021[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://main[.]d350376vxrigaf[.]amplifyapp[.]com/
  •  hxxps://faceb00kcorrection[.]pages[.]dev/
  •  hxxps://modernscalableinfoag[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duringcouplesinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aaarrrt[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://aaarrrt[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://desktop-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://uytfgii7-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-728-1569
  •  hxxps://systemsupport[.]pages[.]dev/
  •  hxxps://eroticaquotes[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tel7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tel7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://activistantisexm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ahgdgg4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahgdgg4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://duskkk8[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://performsinfogth[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://predictascertained[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mmmnnnbbgttrr[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://dhgvcfweghcgwems1[.]pages[.]dev/
  •  hxxps://consistssimilarwebs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://systemshieldproteyh[.]z7[.]web[.]core[.]windows[.]net/?event=ef22dd4a7a91cb50b1d1df80e6cbf6ac
  •  hxxps://systemshieldproteyh[.]z7[.]web[.]core[.]windows[.]net/
  •  hxxps://onal7-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-642-4960
  •  hxxps://mmmnjp-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mmmnjp-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://phn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://windowsexsupportxyz[.]pages[.]dev/Wi0n62HelpErr0Amr062/
  •  hxxps://variousartifactswebs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://consentsxmeant[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://insetdtpublication[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://alljpversionsmsdj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://damnnson[.]life/jct7fct7c/ygxcit7ct7ict7uctu/fof68f%5C/
  •  hxxps://asgenrensyuwell[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://easyk165[.]sg-host[.]com/us/do[.]html
  •  hxxps://seekingoestcrd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2l2pv8ifhlvpn[.]amplifyapp[.]com/
  •  hxxps://nexzoeames[.]pages[.]dev/decm7hvkfum5/
  •  hxxps://suggestsbendsover[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://relatedtremsxc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mmmjjuuii-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mmmjjuuii-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://alia5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi55-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://leastjpkernaljey[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://22b8ba4e732d867b65a87dd0[.]z1[.]web[.]core[.]windows[.]net/5cbdg2dy/?utm_campaign=trackier_36&click_id=672e3ba264857603439b4df4&gclid=Cj0KCQiAire5BhCNARIsAM53K1jKBAM3eAFgej-wLB_sc5IetpWLGFruDNxDejd7ZkTkmbzuQ62H3jsaAthCEALw_wcB
  •  hxxps://4d5280c6-8a92-4665-a114-bb6fe41a9fdf[.]s3[.]ap-northeast-2[.]amazonaws[.]com/&&$@%5E@!!!@%23!@@!$@%25$%5E!%5E%25$$&%23%25!%23%23%5E$%23%25%5E!%5E$@%5E!%25%23$/index[.]html?7rk2ol3a2n=1678458194711760ead8b21cbd14879ac97c17fcc064b2a298&c=vienna&ip=vision+insurance&key=22182&q=guardinanytime[.]com&re=198[.]81[.]129[.]193&s=295355232-guardinanytime[.]com&sr=133608
  •  hxxps://jack8[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack8[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://adsfg7[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://avsgtt9[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://avsgtt9[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://urzuyeyae[.]z16[.]web[.]core[.]windows[.]net/Wi0nHelpABhErr0t067/index[.]html
  •  hxxps://main[.]d1y7b4lrzdggq6[.]amplifyapp[.]com/
  •  hxxps://yghftghjh44[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://onal3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-728-1569
  •  hxxps://mdhmgsy[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mdhmgsy[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://tessta[.]pages[.]dev/Wi0n0ALxerrinf0x0876/
  •  hxxps://healthystore-fine-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ppt00newlinkmain067[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://main[.]d1nyi0bsvz3nwr[.]amplifyapp[.]com/
  •  hxxps://shdgs63[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156
  •  hxxps://aaarrrt-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://aaarrrt-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://postjapanscan[.]pages[.]dev/
  •  hxxps://uuuiiytt-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://uuuiiytt-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://controversialfederal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iiiijjuuyy-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://iiiijjuuyy-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://bewuphsive[.]z28[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=%201-888-901-9880
  •  hxxps://missavjpteens[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d1wfzhe2bzj7ay[.]amplifyapp[.]com/
  •  hxxps://cal0mac0supp0rt1[.]pages[.]dev/
  •  hxxps://indozusapotonirenraku[.]z7[.]web[.]core[.]windows[.]net/indozusapotonirenrakusuruindozusapotonirenrakusuru[.]html
  •  hxxps://xsdwq-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://xsdwq-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://namesnewoaoa[.]b-cdn[.]net/
  •  hxxps://multifliskey[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://device-network-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://chargedmoderns[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://missavsxmovies[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mdhmgsy-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mdhmgsy-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://webp0rnattested[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d1cl53hs34c3kn[.]amplifyapp[.]com/
  •  hxxps://missavsxphotos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://staging[.]d1q5un4y1x9owy[.]amplifyapp[.]com/aaaaaaaaaaaaaajdka[.]z5[.]web[.]core[.]windows[.]net/WinJsPxl077/index[.]html
  •  hxxps://tel9-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mmnnkkipp[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mmnnkkipp[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ill4[.]marketmingleusa[.]store/_Fm7-alert[.]mp3
  •  hxxps://jack9[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack9[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://device-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://habs5-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://habs5-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://rokk10[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://questwave04[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-467-2900
  •  hxxps://yguh-nrmhu[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-370-4471
  •  hxxps://chek121[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://iwuhdua2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://virulitiuous[.]autos/
  •  hxxps://reciepewhisk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://u9x3aclrwpruc[.]pages[.]dev/smart89/
  •  hxxps://nownamenapas[.]b-cdn[.]net/
  •  hxxps://main[.]d2r8w6ck7qbi9k[.]amplifyapp[.]com/
  •  hxxps://avsgtt88[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://avsgtt88[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://offeringbecamebase[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://interferesuggestms[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iwuhdua2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://iwuhdua2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://aloha10[.]savannainsights[.]org/_Fm7-alert[.]mp3
  •  hxxps://f0mlxe0jneh1[.]pages[.]dev/smart89/
  •  hxxps://main[.]d3o8i7k8wuw5m9[.]amplifyapp[.]com/
  •  hxxps://five5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://five5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://device-help-error[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://main[.]d23xi0yisl1vk0[.]amplifyapp[.]com/
  •  hxxps://gvytvv1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gvytvv1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://scrupulousconcern[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ooziltkbcaesf[.]z1[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://ahgdgg4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://habs5[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://habs5[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://desktop-spport-helo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ny1[.]softwavesolutions[.]online/_Fm7-alert[.]mp3
  •  hxxps://decadessuchinfos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://virtualsupp0rt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://c9kwfyzy9euu73vy[.]pages[.]dev/smart89/
  •  hxxps://indy2[.]cartcrazeusa[.]store/
  •  hxxps://missavrevealed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mdhmgsy2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mdhmgsy2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://device-issue-3221[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mmnnkkipp-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmnnkkipp-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://greece3[.]trendhiveusa[.]store/
  •  hxxps://duskkk5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dgshcvghsdvghdssggxgdsms11[.]pages[.]dev/
  •  hxxps://hjsuitjksdflkwoersndjfhwer-nsjjhgauweflksdfwe-kjasndiufywkljefn[.]fra1[.]cdn[.]digitaloceanspaces[.]com/Rteump93/index[.]html
  •  hxxps://ollmjp41vbd5ll[.]pages[.]dev/smart89/
  •  hxxps://duskkk6[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://duskkk6[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://kahsypp4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://oopoppp-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://oopoppp-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://oopoppp-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://desktop-error-1233234[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://confrontationtale[.]pages[.]dev/TC1P44Qg/
  •  hxxps://gvytvv1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://appearedfollowed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2hf7tq3n81qto[.]amplifyapp[.]com/
  •  hxxps://device-manage-1122[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://towardslimited[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://femininelustory[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://beesite[.]store/Win08ShDMeEr0887/
  •  hxxps://tel7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://tel7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://uuuiiytt[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://identityhubsnetinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://avsgtt1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=09-70-38-93-28
  •  hxxps://missavmethods[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qwwetyuuuu[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmmnnhgt[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mmmnnhgt[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dgvcgwetuvghw11[.]pages[.]dev/
  •  hxxps://qkmain00linknew094[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://phn8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tronblmak9si[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronblmak9si[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs6bvem35yhaib&tid=903&subid=citizensback[.]com&ref=citizensback[.]com&922
  •  hxxps://www[.]charlieloyd[.]autos/
  •  hxxps://duskkk5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://duskkk5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://main[.]di9mnx0wj6v6h[.]amplifyapp[.]com/
  •  hxxps://cmenxoas[.]pages[.]dev/il195088piuz/
  •  hxxps://brampton1[.]shopsphereusa[.]online/
  •  hxxps://czeckimportantmassgae[.]pages[.]dev/
  •  hxxps://missavsubmit[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://desktop-support-helo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://duskkk9-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk9-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://upheldp0rnnotable[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duskkk9[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://duskkk9[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gimmickrating[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://device-error-0195[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dcgsdcsghdms1[.]pages[.]dev/
  •  hxxps://missavautoserves[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eroticjpteensx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://network-support-help[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tronblka4sed[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs6bulm38r9juv&tid=903&subid=weatherunderground[.]org&ref=weatherunderground[.]org&922]
  •  hxxps://hdporno-error0x21503-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://jack8-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack8-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sjgtgg5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sjgtgg5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://device-alert-1241[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jack5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://collapserugby[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://hisplavv4237link242[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://device-alert-012[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://missavreferees[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://teengirlssaucy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hisplavv4237link238[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://familiarstatues[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://avsgtt9-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://agyaggbt5555-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://agyaggbt5555-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://innovationsbillionprn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aazaza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://aazaza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://usummitaheirwofglid-tiftingmilexhaustion-elownruanchthbeonlranc[.]fra1[.]cdn[.]digitaloceanspaces[.]com/wekroiimwer/index[.]html
  •  hxxps://rishi9[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://specificacross[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://productionfictional[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://regulatingapply[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://itstayebeforethebman-weanhisascenttrwei-whetontiorncktitsdreaio[.]sgp1[.]cdn[.]digitaloceanspaces[.]com/OuydredtimssEdee/index[.]html
  •  hxxps://asadttt-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://desktop-device-1201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rishi10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rishi10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://orange-dune-0aeda1b10[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://redundantvaluesif[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qwwetyuuuu-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://qwwetyuuuu-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tronblka4s3m[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://centeredreceives[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://five77[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://variousactsvalue[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mmmnnhgt-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmmnnhgt-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://tel5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tel5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tel9[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://reportreviewedxs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://partswebsengaging[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jack5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://cfxd-5xdcz[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-370-4471
  •  hxxps://ayhsgydg55[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ayhsgydg55[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://alia8-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://yttr4-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-642-4960
  •  hxxps://alia5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://alia5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sdfgfdhfhd07sdgdshss[.]z33[.]web[.]core[.]windows[.]net/sgsdgdsg07hdssf[.]html
  •  hxxps://oopllpii-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://oopllpii-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://oopllpii-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://oopllpii-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://yebacefip[.]z1[.]web[.]core[.]windows[.]net/Wi0nHelpABhErr0t067/index[.]html
  •  hxxps://micro-device-alert-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rokk10-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mpod[.]pages[.]dev/
  •  hxxps://otpneededurgents[.]b-cdn[.]net/
  •  hxxps://device-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://indiebasedvalues[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2s98bppyooj5b[.]amplifyapp[.]com/
  •  hxxps://coveringalongsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aytfg-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi8[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://main[.]d2dkj8x60mekqg[.]amplifyapp[.]com/
  •  hxxps://chek121-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://chek121-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://rishi8-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rishi8-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://main[.]dbq2v756p6sim[.]amplifyapp[.]com/
  •  hxxps://main[.]d2pzcgt33qdx74[.]amplifyapp[.]com/
  •  hxxps://main[.]d1agmb7rbbb36l[.]amplifyapp[.]com/Ma0c0MntyEr00170887/index[.]html
  •  hxxps://1fs5fb07juat[.]z13[.]web[.]core[.]windows[.]net/?zpbid=63019_40815243-9ba9-11ef-b18a-2c9fd13e5938
  •  hxxps://zepemugayo[.]z14[.]web[.]core[.]windows[.]net/?phone=09-70-18-77-90
  •  hxxps://zepemugayo[.]z14[.]web[.]core[.]windows[.]net/
  •  hxxps://jhsah[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jhsah[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://raritiesvalkernal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://genresmattersxc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yttr4[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-255-5942
  •  hxxps://alia10-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://alia10-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://makingclearlyinf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://6inp64cmwmlu[.]z13[.]web[.]core[.]windows[.]net/?dicbo=v4-t8SvFcr-1195876348-1
  •  hxxps://aazaza-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://ahgdgg5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tel5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://gvytvv[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://gvytvv[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://njzld62vt9cg7143bh85rqyf[.]z13[.]web[.]core[.]windows[.]net/?msclkid=512798d4590e1123d174fffd776002b2
  •  hxxps://oopoppp[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://oopoppp[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://main[.]d3rnnzp4dzwt95[.]amplifyapp[.]com/
  •  hxxps://xsdwq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://xsdwq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://avsgtt88-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://depictfirstfilmsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hhjhhjbjhhj[.]pages[.]dev/
  •  hxxps://dhvagdv[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://meantmindsinfu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bfhjbsdjgjksjg[.]z33[.]web[.]core[.]windows[.]net/Wi0nHelpSpecErr0072/index[.]html
  •  hxxps://ayhsgydg55-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ayhsgydg55-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://knhxbahsyp1[.]pages[.]dev/smart89/
  •  hxxps://oopllpii[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://oopllpii[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://five5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajsyfaty[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://missavtradeinffgu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2mprvi4i1q3h0[.]amplifyapp[.]com/
  •  hxxps://alia6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajsyfaty-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://nzh90ulwsg[.]pages[.]dev/smart89/
  •  hxxps://missavdetermine[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://s3[.]amazonaws[.]com/myujiobkt1902[.]97[.]50bh4tr5178[.]vgkr62[.]ghjjp260[.]5[.]d81j[.]4[.]b2h[.]1[.]007/Win08ShDMeEr0887/index[.]html
  •  hxxps://samrt2[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=18773294078
  •  hxxps://identifbasisied[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jhsah1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156/
  •  hxxps://projectagent48[.]pages[.]dev/
  •  hxxps://ahgdgg5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ahgdgg5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://news4[.]whimsywarehouseusa[.]xyz/_Fm7-alert[.]mp3
  •  hxxps://main[.]d1p4al3b73yxrt[.]amplifyapp[.]com/
  •  hxxps://tiveiilu[.]z22[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=%201-888-728-1639
  •  hxxps://jeethigayadonald[.]b-cdn[.]net/
  •  hxxps://alia10[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://iwuhdua1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://iwuhdua1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftt5[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-226-7906
  •  hxxps://main[.]d3g5msxj9v3923[.]amplifyapp[.]com/
  •  hxxps://overallvaluesales[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://alia8[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://dhvagdv-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://administration-ahd[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://facebokislocked[.]netlify[.]app/
  •  hxxps://updrifta[.]autos/
  •  hxxps://main[.]d18k5p88yqti8o[.]amplifyapp[.]com/
  •  hxxps://adsfg7-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://adsfg7-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://denver1[.]shopsphereusa[.]xyz/_Fm7-alert[.]mp3
  •  hxxps://desktop-error-2121[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://moderninfoexecuted[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://desktop-support-1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dtycvsdghsdms1[.]pages[.]dev/
  •  hxxps://latumiyo[.]z5[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=null
  •  hxxps://habs4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack9-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack9-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://alia9-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://alia9-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://tronblkams8ud[.]z13[.]web[.]core[.]windows[.]net//?click_id=2isqs6bulm37stxdx&tid=903&subid=southweset[.]com&ref=southweset[.]com&922]
  •  hxxps://sfbjksdfkdbfkjedfljwedfwjlef[.]pages[.]dev/
  •  hxxps://juyy1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-255-5942
  •  hxxps://juyy1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-772-8612
  •  hxxps://valuedscenmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://picturesinsertdg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://network-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rishi9-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi9-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://phn8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://news[.]appalchemy[.]site/
  •  hxxps://device-lert-02209[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://yellow9[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-286-5054
  •  hxxps://tronblma3swkj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://five77-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://five77-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://dsycdhdgsms2[.]pages[.]dev/
  •  hxxps://funny-tharp[.]128-199-137-171[.]plesk[.]page/
  •  hxxps://phn9-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://phn9-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://regularadultstrends[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jack7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://rishi10-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://undergostudies[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://millionservieds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://white-tree-097a3f310[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://jack7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jack7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajlxauqkshxq[.]pages[.]dev/smart89/
  •  hxxps://net-rylith[.]azurewebsites[.]net/Wi0nHelpEthylErr0t071/index[.]html
  •  hxxps://keysuppo[.]blob[.]core[.]windows[.]net/kisala/indexd82e[.]html
  •  hxxps://yghftghjh2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sub-sys-jp-master[.]s3[.]us-west-2[.]amazonaws[.]com/scanner-win/index[.]html

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.