2024-11-12 - Tech Support Scam - Phishing Capmapign Observation Alert

66 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 66 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://menscravery[.]life/gddtykditdtuc/68tre8fs6wfqaeg6qarfscvyfd67qa/6rdfavzfac8yjzsrgcua6zjsfcvusj/
  •  hxxps://yellow2-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-721-7996
  •  hxxps://observedreportvisits[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jjkkxzxss767zzsxxszsa[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-206-9254
  •  hxxps://aytfg[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://aytfg[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://textsfromhokeysv[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d3hskxosxh1isk[.]amplifyapp[.]com/
  •  hxxps://new77[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://new77[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://agyaggbt5555[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://081102kasdjsasdjaiusdnij[.]z24[.]web[.]core[.]windows[.]net/21102024info[.]html
  •  hxxps://sjgtgg5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://bettersxbconsume[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://heeanchbsnahpltaleftjub-tihbforethebintaleptb-todednowitirdswin[.]blr1[.]cdn[.]digitaloceanspaces[.]com/Rteump93/index[.]html
  •  hxxps://newf22-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://newf22-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://rishi55[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi55[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://duskkk8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://eb2y9nmbzj[.]pages[.]dev/smart89/
  •  hxxps://five8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://jhsah-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://jhsah-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://phn9[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://phn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]d2u6i901kjzk0a[.]amplifyapp[.]com/
  •  hxxps://vfdgftrtdr10-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://vfdgftrtdr10-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://mdhmgsy2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mdhmgsy2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://stocksupp0rtsale[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zhxbdkbxqnammp6u3itsgc6zvjwggu6em6ff6ddu2vncbgvqqv6qvs3[.]pages[.]dev/smart89/
  •  hxxps://ill3[.]marketmingleusa[.]store/_Fm7-alert[.]mp3
  •  hxxps://uhgb-kj7bp[.]ondigitalocean[.]app/hsrkhk09xWn0786xhrkx/index[.]php?phone=1-860-792-8151
  •  hxxps://sm4ruaus0xg2[.]z13[.]web[.]core[.]windows[.]net/?zpbid=78432_a67cbb89-9d2f-11ef-8f9e-9f2e0f8686de
  •  hxxps://phn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://clauseperiodwsb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://servicesexclusively[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sadbhavnews[.]b-cdn[.]net/
  •  hxxps://u2644egehmngdncxzy1m[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-495-2093
  •  hxxps://settingsvictims[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iuhuy[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156
  •  hxxps://main[.]d1ah7a5wvajmk5[.]amplifyapp[.]com/
  •  hxxps://storage[.]googleapis[.]com/madeleinshake/index[.]html?gad_source=5&gclid=EAIaIQobChMImc2lyfHTiQMVb1n2CB1bbwekEAEYASAAEgK3CfD_BwE
  •  hxxps://o4cnafnszhb[.]pages[.]dev/smart89/
  •  hxxps://gjhhjkomk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gentle-meadow-034644210[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://fbotkm2t7ns92fbfip9[.]pages[.]dev/smart89/
  •  hxxps://inf0egtebwqms11a[.]pages[.]dev/
  •  hxxps://webspeculationsadults[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://njuiooooii-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://favorablydefender[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://microsoft-device-23121[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://main[.]d10ca905gfz49h[.]amplifyapp[.]com/
  •  hxxps://endeavorawaynhed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vfdgftrtdr10[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://vfdgftrtdr10[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://remarkedimage[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fgdhdgjdfgjgfj15hhgfjfs[.]z28[.]web[.]core[.]windows[.]net/fdsgfs15[.]html
  •  hxxps://cfvgh56fcgyc[.]pages[.]dev/Er0Win8helpline76/
  •  hxxps://duskkk6-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk6-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://main[.]d1ivw50h15ceql[.]amplifyapp[.]com/
  •  hxxps://bryancoli777[.]github[.]io/popup/
  •  hxxps://www[.]d29w3it5d9d4d3[.]amplifyapp[.]com/
  •  hxxps://till7-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://futuristicmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nnnnnhhhh[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://nnnnnhhhh[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://main[.]d3r8bmy88sgskd[.]amplifyapp[.]com/
  •  hxxps://kahsypp4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://858b78b9[.]ca11he1pn0wms112[.]pages[.]dev/
  •  hxxps://jhgdyusa4-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://getsoffensemissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://auehdnk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://device-network-021[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://main[.]d350376vxrigaf[.]amplifyapp[.]com/
  •  hxxps://modernscalableinfoag[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://remarksp0rngetsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duringcouplesinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till9[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://steadilybecame[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://work1212-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://work1212-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://newf11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tel7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tel7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahgdgg4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahgdgg4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://duskkk8[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://performsinfogth[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://predictascertained[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dhgvcfweghcgwems1[.]pages[.]dev/
  •  hxxps://consistssimilarwebs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://phn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://phn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://variousartifactswebs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://consentsxmeant[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://alljpversionsmsdj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adultsignedwebshy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://euwfhueihfyurdg[.]pages[.]dev/
  •  hxxps://asgenrensyuwell[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://easyk165[.]sg-host[.]com/us/do[.]html
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://seekingoestcrd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2l2pv8ifhlvpn[.]amplifyapp[.]com/
  •  hxxps://disordvictimnch[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nexzoeames[.]pages[.]dev/decm7hvkfum5/
  •  hxxps://suggestsbendsover[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://relatedtremsxc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rishi55-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://www[.]d4ce5g7dnbwfo[.]amplifyapp[.]com/
  •  hxxps://ahstty0[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://leastjpkernaljey[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://22b8ba4e732d867b65a87dd0[.]z1[.]web[.]core[.]windows[.]net/5cbdg2dy/?utm_campaign=trackier_36&click_id=672e3ba264857603439b4df4&gclid=Cj0KCQiAire5BhCNARIsAM53K1jKBAM3eAFgej-wLB_sc5IetpWLGFruDNxDejd7ZkTkmbzuQ62H3jsaAthCEALw_wcB
  •  hxxps://yfd68rjgu4o[.]pages[.]dev/smart89/
  •  hxxps://reachedcontentwebsh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://4d5280c6-8a92-4665-a114-bb6fe41a9fdf[.]s3[.]ap-northeast-2[.]amazonaws[.]com/&&$@%5E@!!!@%23!@@!$@%25$%5E!%5E%25$$&%23%25!%23%23%5E$%23%25%5E!%5E$@%5E!%25%23$/index[.]html?7rk2ol3a2n=1678458194711760ead8b21cbd14879ac97c17fcc064b2a298&c=vienna&ip=vision+insurance&key=22182&q=guardinanytime[.]com&re=198[.]81[.]129[.]193&s=295355232-guardinanytime[.]com&sr=133608
  •  hxxps://jack8[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack8[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://till8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://avsgtt9[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://avsgtt9[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ftoeef47vurzbdrdw6p[.]pages[.]dev/smart89/
  •  hxxps://main[.]d1y7b4lrzdggq6[.]amplifyapp[.]com/
  •  hxxps://till6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://till6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mdhmgsy[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mdhmgsy[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://tessta[.]pages[.]dev/Wi0n0ALxerrinf0x0876/
  •  hxxps://ppt00newlinkmain067[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://shdgs63[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156
  •  hxxps://www[.]d19vn7la6f16fp[.]amplifyapp[.]com/
  •  hxxps://ahstty1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://postjapanscan[.]pages[.]dev/
  •  hxxps://sunday33-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sunday33-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://indozusapotonirenraku[.]z7[.]web[.]core[.]windows[.]net/indozusapotonirenrakusuruindozusapotonirenrakusuru[.]html
  •  hxxps://namesnewoaoa[.]b-cdn[.]net/
  •  hxxps://multifliskey[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kkkkjiiioo-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://kkkkjiiioo-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://device-network-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://train11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://chargedmoderns[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mdhmgsy-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mdhmgsy-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sgdstt1-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://webp0rnattested[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://train11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://calculatedvarious[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f0agxfzhqebjgctuv5[.]pages[.]dev/smart89/
  •  hxxps://tel9-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ill4[.]marketmingleusa[.]store/_Fm7-alert[.]mp3
  •  hxxps://ajhgsdayg4[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ajhgsdayg2[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ajhgsdayg2[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://jack9[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack9[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://device-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://y6x2hg3cpurptorefcz0[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-495-2093
  •  hxxps://rokk10[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ahstty1[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://kkkkjiiioo[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://kkkkjiiioo[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://consumptionusersd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://questwave04[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-467-2900
  •  hxxps://sgdstt1[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://iwuhdua2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://virulitiuous[.]autos/
  •  hxxps://reciepewhisk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://u9x3aclrwpruc[.]pages[.]dev/smart89/
  •  hxxps://avsgtt88[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://avsgtt88[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://offeringbecamebase[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://interferesuggestms[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iwuhdua2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://iwuhdua2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://comparedreferred[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ahstty0-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahstty0-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://f0mlxe0jneh1[.]pages[.]dev/smart89/
  •  hxxps://main[.]d3o8i7k8wuw5m9[.]amplifyapp[.]com/
  •  hxxps://five5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://five5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://newf22[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://newf22[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://www[.]d1fw15940kb3qx[.]amplifyapp[.]com/
  •  hxxps://sgdstt9-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://scrupulousconcern[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ooziltkbcaesf[.]z1[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://ajhgsdayg4-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ahgdgg4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ny1[.]softwavesolutions[.]online/_Fm7-alert[.]mp3
  •  hxxps://decadessuchinfos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d2p46lku58cpe2[.]amplifyapp[.]com/
  •  hxxps://c9kwfyzy9euu73vy[.]pages[.]dev/smart89/
  •  hxxps://indy2[.]cartcrazeusa[.]store/
  •  hxxps://mdhmgsy2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mdhmgsy2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://greece3[.]trendhiveusa[.]store/
  •  hxxps://elitedow[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://duskkk5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dgshcvghsdvghdssggxgdsms11[.]pages[.]dev/
  •  hxxps://hjsuitjksdflkwoersndjfhwer-nsjjhgauweflksdfwe-kjasndiufywkljefn[.]fra1[.]cdn[.]digitaloceanspaces[.]com/Rteump93/index[.]html
  •  hxxps://ollmjp41vbd5ll[.]pages[.]dev/smart89/
  •  hxxps://duskkk6[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://duskkk6[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://kahsypp4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://confrontationtale[.]pages[.]dev/TC1P44Qg/
  •  hxxps://appearedfollowed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2hf7tq3n81qto[.]amplifyapp[.]com/
  •  hxxps://watchinglogivdc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://towardslimited[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sfssgshsgdhgd01dfhdfjds[.]z33[.]web[.]core[.]windows[.]net/ssdfhs01[.]html
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://detainedinskerlfysx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://beesite[.]store/Win08ShDMeEr0887/
  •  hxxps://tel7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://tel7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://hhjad032jsd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://identityhubsnetinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://avsgtt1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=09-70-38-93-28
  •  hxxps://dgvcgwetuvghw11[.]pages[.]dev/
  •  hxxps://qkmain00linknew094[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://phn8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sgdstt122-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sgdstt122-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tronblmak9si[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronblmak9si[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs6bvem35yhaib&tid=903&subid=citizensback[.]com&ref=citizensback[.]com&922
  •  hxxps://www[.]charlieloyd[.]autos/
  •  hxxps://duskkk5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://duskkk5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://main[.]di9mnx0wj6v6h[.]amplifyapp[.]com/
  •  hxxps://12th9z2c3p43352[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://cmenxoas[.]pages[.]dev/il195088piuz/
  •  hxxps://iyuc6bl80gmrpp[.]pages[.]dev/smart89/
  •  hxxps://brampton1[.]shopsphereusa[.]online/
  •  hxxps://duskkk9-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://duskkk9-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://five8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://five8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://12thr1n9g5s45122[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://missavpornographic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duskkk9[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://duskkk9[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://weert1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://weert1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gimmickrating[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dcgsdcsghdms1[.]pages[.]dev/
  •  hxxps://eroticjpteensx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ariabennett[.]autos/
  •  hxxps://foremostinsrtd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronblka4sed[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs6bulm38r9juv&tid=903&subid=weatherunderground[.]org&ref=weatherunderground[.]org&922]
  •  hxxps://workplaceaction[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jack8-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack8-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sjgtgg5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sjgtgg5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://www[.]d20feyglasfcjf[.]amplifyapp[.]com/
  •  hxxps://jack5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jack5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://www[.]d6bwtj5thn4i4[.]amplifyapp[.]com/
  •  hxxps://newf11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://newf11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://collapserugby[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://hisplavv4237link242[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://device-alert-012[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://teengirlssaucy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hisplavv4237link238[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://familiarstatues[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://exploratorystumbled[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://newf44[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://newf44[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://www[.]d1e6rja72mgv3c[.]amplifyapp[.]com/
  •  hxxps://avsgtt9-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://agyaggbt5555-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://agyaggbt5555-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://innovationsbillionprn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jpkeymultibillion[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tendtoberisk[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rishi9[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://specificacross[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://work1212[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://work1212[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://sunday11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sunday11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://webmasterp0rnshy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rishi10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rishi10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://akdjjejj[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://redundantvaluesif[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronblka4s3m[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://elevationactivityfg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://appliedvcformer[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://centeredreceives[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://five77[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://variousactsvalue[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tel5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://tel5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tel9[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jack5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://ayhsgydg55[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ayhsgydg55[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://gehubnannuallyku[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sdfgfdhfhd07sdgdshss[.]z33[.]web[.]core[.]windows[.]net/sgsdgdsg07hdssf[.]html
  •  hxxps://till9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://yebacefip[.]z1[.]web[.]core[.]windows[.]net/Wi0nHelpABhErr0t067/index[.]html
  •  hxxps://micro-device-alert-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rokk10-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mpod[.]pages[.]dev/
  •  hxxps://otpneededurgents[.]b-cdn[.]net/
  •  hxxps://indiebasedvalues[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]dqzj1y0xho27g[.]amplifyapp[.]com/
  •  hxxps://coveringalongsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aytfg-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi8[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi8-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rishi8-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://main[.]dbq2v756p6sim[.]amplifyapp[.]com/
  •  hxxps://main[.]d1agmb7rbbb36l[.]amplifyapp[.]com/Ma0c0MntyEr00170887/index[.]html
  •  hxxps://jhsah[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jhsah[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://directorygran[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://nnnnnhhhh-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://makingclearlyinf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://6inp64cmwmlu[.]z13[.]web[.]core[.]windows[.]net/?dicbo=v4-t8SvFcr-1195876348-1
  •  hxxps://ahgdgg5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tel5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://sgdstt122[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://sgdstt122[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://jellyshake[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://resourcerfvadvances[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://avsgtt88-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://depictfirstfilmsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hhjhhjbjhhj[.]pages[.]dev/
  •  hxxps://meantmindsinfu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d37ufhepep0enm[.]amplifyapp[.]com/
  •  hxxps://bfhjbsdjgjksjg[.]z33[.]web[.]core[.]windows[.]net/Wi0nHelpSpecErr0072/index[.]html
  •  hxxps://ayhsgydg55-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ayhsgydg55-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://knhxbahsyp1[.]pages[.]dev/smart89/
  •  hxxps://five5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftty5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftty5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://missavtradeinffgu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://main[.]d2mprvi4i1q3h0[.]amplifyapp[.]com/
  •  hxxps://segmentcostbiogets[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://desktop-device-alert-2323[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://regulatingmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jhgdyusa4[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://s3[.]amazonaws[.]com/myujiobkt1902[.]97[.]50bh4tr5178[.]vgkr62[.]ghjjp260[.]5[.]d81j[.]4[.]b2h[.]1[.]007/Win08ShDMeEr0887/index[.]html
  •  hxxps://www[.]d2w0cvrvb4jvzt[.]amplifyapp[.]com/
  •  hxxps://sonicsage[.]autos/
  •  hxxps://identifbasisied[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jhsah1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156/
  •  hxxps://projectagent48[.]pages[.]dev/
  •  hxxps://ahgdgg5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ahgdgg5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://voyagedacruise[.]com/
  •  hxxps://main[.]d1p4al3b73yxrt[.]amplifyapp[.]com/
  •  hxxps://tiveiilu[.]z22[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=%201-888-728-1639
  •  hxxps://animatemodeling[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jeethigayadonald[.]b-cdn[.]net/
  •  hxxps://iwuhdua1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://iwuhdua1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftt5[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-226-7906
  •  hxxps://main[.]d3g5msxj9v3923[.]amplifyapp[.]com/
  •  hxxps://overallvaluesales[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hdsporno-error0x20715-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://ajsguy[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajsguy[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://administration-ahd[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://updrifta[.]autos/
  •  hxxps://sunday44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://denver1[.]shopsphereusa[.]xyz/_Fm7-alert[.]mp3
  •  hxxps://ftty2[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sgdstt9[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://dtycvsdghsdms1[.]pages[.]dev/
  •  hxxps://ajsguy-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ajsguy-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://latumiyo[.]z5[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=null
  •  hxxps://jack9-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jack9-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://reasonabadventsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fixahaser[.]tech/
  •  hxxps://tronblkams8ud[.]z13[.]web[.]core[.]windows[.]net//?click_id=2isqs6bulm37stxdx&tid=903&subid=southweset[.]com&ref=southweset[.]com&922]
  •  hxxps://sfbjksdfkdbfkjedfljwedfwjlef[.]pages[.]dev/
  •  hxxps://valuedscenmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://11th7d3f5z45121[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ftty6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ftty6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://picturesinsertdg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rishi9-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://rishi9-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://phn8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phn8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://specifiedoccursx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://device-lert-02209[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://yellow9[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-286-5054
  •  hxxps://tronblma3swkj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://spatialgroupp0rnx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://systemsrendering[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://five77-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://five77-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://funny-tharp[.]128-199-137-171[.]plesk[.]page/
  •  hxxps://phn9-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://phn9-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://regularadultstrends[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jack7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://rishi10-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://undergostudies[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://millionservieds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ajhgsdayg2-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajhgsdayg2-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://charismaticrelax[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://vulnerablelofivoprmis[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jack7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jack7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ajlxauqkshxq[.]pages[.]dev/smart89/
  •  hxxps://net-rylith[.]azurewebsites[.]net/Wi0nHelpEthylErr0t071/index[.]html
  •  hxxps://sunday33[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sub-sys-jp-master[.]s3[.]us-west-2[.]amazonaws[.]com/scanner-win/index[.]html

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.