2024-11-16 - Tech Support Scam - Phishing Capmapign Observation Alert

92 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 92 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://www[.]dwump9krwpi6r[.]amplifyapp[.]com/
  •  hxxps://observedreportvisits[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://infojustcyassert[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d3q80qrnfhz7hx[.]amplifyapp[.]com/
  •  hxxps://www[.]d3hskxosxh1isk[.]amplifyapp[.]com/
  •  hxxps://new77[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://new77[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sdgvgsdh5623fgsdvcgds[.]pages[.]dev/
  •  hxxps://www[.]d1m5xjis5anlbg[.]amplifyapp[.]com/
  •  hxxps://yuu7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://yuu7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://newf22-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://newf22-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://siid6[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://siid6[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://makeit77-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://makeit77-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://www[.]dui8eg9hhafxr[.]amplifyapp[.]com/
  •  hxxps://eb2y9nmbzj[.]pages[.]dev/smart89/
  •  hxxps://fvc11[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-940-6275
  •  hxxps://noflow[.]b-cdn[.]net/
  •  hxxps://www[.]dog6d6bgmoong[.]amplifyapp[.]com/
  •  hxxps://missavambiguity[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sona8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sona8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://www[.]dxmfjgjrrvdoi[.]amplifyapp[.]com/
  •  hxxps://track1[.]2mdhzcz23a10[.]com/
  •  hxxps://ambayu4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://6ra2m72u3yb0ffb2kyad[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-866-960-6614&bemobdata=c%3D2d2c308a-02bd-47f7-91fc-b1bbb0a9d2e3[.][.]l%3D5995bc8e-b809-4de0-a37c-2e69c0112114[.][.]a%3D0[.][.]b%3D0[.][.]ts%3D1731526480297
  •  hxxps://archaichelpingkso[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d1sidelsxsj1jm[.]amplifyapp[.]com/
  •  hxxps://yrdyr65rdrfd[.]pages[.]dev/
  •  hxxps://ziid3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-506-8573
  •  hxxps://www[.]d2u6i901kjzk0a[.]amplifyapp[.]com/
  •  hxxps://ahdgygg5-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahdgygg5-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://tpdsf[.]pages[.]dev/
  •  hxxps://sona5-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sona5-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://110nov018ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kkxssxdscdc7ds6szzsxsds[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-877-730-7933
  •  hxxps://uhgb-kj7bp[.]ondigitalocean[.]app/hsrkhk09xWn0786xhrkx/index[.]php?phone=1-860-792-8151
  •  hxxps://bestgermanyscanner[.]pages[.]dev/
  •  hxxps://hbfpb9xvxgim0owuxky[.]pages[.]dev/smart89/
  •  hxxps://nathanmartin[.]autos/
  •  hxxps://u2644egehmngdncxzy1m[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-495-2093
  •  hxxps://settingsvictims[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iuhuy[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-1-234-294-2156
  •  hxxps://socialmissavgroups[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://benjaminscott[.]autos/
  •  hxxps://storage[.]googleapis[.]com/madeleinshake/index[.]html?gad_source=5&gclid=EAIaIQobChMImc2lyfHTiQMVb1n2CB1bbwekEAEYASAAEgK3CfD_BwE
  •  hxxps://gjhhjkomk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://storagea0ss190dd12[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://webspeculationsadults[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://njuiooooii-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://mjborlebvdrr[.]pages[.]dev/smart89/
  •  hxxps://neb5h4fqq7neve41u9hy[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-495-2093
  •  hxxps://storage06accounter91[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://storageclone516vdfh[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://examineimpacts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ny[.]pixelpilot[.]store/
  •  hxxps://blue-sky-0723e9410[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://effectsafetsively[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d309ghdtyrrg8m[.]amplifyapp[.]com/
  •  hxxps://infogjustorientation[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://dtyupxldwwi[.]pages[.]dev/smart89/
  •  hxxps://phrasecriticsbg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ijbv-l3qal[.]ondigitalocean[.]app/jsrkhk09Wn0786xhrkx/index[.]php?phone=1-860-288-3826
  •  hxxps://fgdhdgjdfgjgfj15hhgfjfs[.]z28[.]web[.]core[.]windows[.]net/fdsgfs15[.]html
  •  hxxps://cfvgh56fcgyc[.]pages[.]dev/Er0Win8helpline76/
  •  hxxps://satiricalp0rnstarring[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://track6[.]2xvc33vvd10[.]com/
  •  hxxps://siid7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://siid7-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]d29w3it5d9d4d3[.]amplifyapp[.]com/
  •  hxxps://www[.]d3hmcsf1aiosxp[.]amplifyapp[.]com/
  •  hxxps://till7-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://dfdshdhs02afgfhshsssaa[.]z33[.]web[.]core[.]windows[.]net/sgdsgs02[.]html
  •  hxxps://futuristicmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mmtt16[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-506-5599
  •  hxxps://nnnnnhhhh[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://nnnnnhhhh[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ytfcvgg5-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-234-5176
  •  hxxps://858b78b9[.]ca11he1pn0wms112[.]pages[.]dev/
  •  hxxps://jutt5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://jutt5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://siid7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://auehdnk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://remarksp0rngetsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mentoszindagihai[.]pages[.]dev/
  •  hxxps://support-urgent-follow-up[.]kartaio[.]design/
  •  hxxps://moralstarringswqa[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://makingmissavbgtf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till9[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://dfsz544ssdd[.]pages[.]dev/
  •  hxxps://steadilybecame[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://work1212-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://work1212-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]di8w13ahxxtas[.]amplifyapp[.]com/
  •  hxxps://newf11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxp://hitrss03p01[.]club/werrx01USAHTML/?bcda=
  •  hxxps://finleyturner[.]autos/
  •  hxxps://www[.]d3v857ccnnu080[.]amplifyapp[.]com/
  •  hxxps://lcbb9[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-610-5807
  •  hxxps://yuper17-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-888-8888
  •  hxxps://easyk196[.]sg-host[.]com/us/do[.]html
  •  hxxps://febiltaskoocz[.]z28[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://workplacemissavgts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://110nov009mm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://storageaaxa0190[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://bettermissabeyd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://track3[.]2dzcva23zz8[.]com/
  •  hxxps://prevalentmostzh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://isudgysu8-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://isudgysu8-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ggraxiyzqatsxtuuncg0vqwhswkzcjiyh8jeeswzqmckxqaueslan8[.]pages[.]dev/smart89/
  •  hxxps://hitterstoty[.]b-cdn[.]net/
  •  hxxps://euwfhueihfyurdg[.]pages[.]dev/
  •  hxxps://main[.]d2q4vps74cpagd[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://chloediaz[.]autos/
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sunday11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://easyk177[.]sg-host[.]com/us/do[.]html
  •  hxxps://disordvictimnch[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jutt10-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jutt10-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ahdgygg8[.]z44[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahdgygg8[.]z44[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxp://oilrss03p01[.]club/werrx01USAHTML/?bcda=
  •  hxxps://110nov010ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ambayu4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]d4ce5g7dnbwfo[.]amplifyapp[.]com/
  •  hxxps://ahstty0[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://yfd68rjgu4o[.]pages[.]dev/smart89/
  •  hxxps://reachedcontentwebsh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://minutiahkestudy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ftoeef47vurzbdrdw6p[.]pages[.]dev/smart89/
  •  hxxps://kkkj8788zzzsdzszxxc[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-353-1238
  •  hxxps://siid6-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://siid6-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://till6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://till6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sona7-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sona7-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://kkksxsxcdkkzxsx76szsxsz[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-684-5419
  •  hxxps://victimmissavbct[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://irtcge9qw9ssq[.]pages[.]dev/smart89/
  •  hxxps://easyk171[.]sg-host[.]com/us/do[.]html
  •  hxxps://9f1c289e394d4868b058[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d19vn7la6f16fp[.]amplifyapp[.]com/
  •  hxxps://hdporno-error0x21306-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://ahstty1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://funsurveygetsxding[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://4storageaccounterm67[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://sona5[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sona5[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sfsdfgfdshdhs04sfgsdg[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://tronblkams8u[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs9ookm3hdma4d&tid=903&subid=avlara[.]com&ref=avlara[.]com&922
  •  hxxps://sunday33-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sunday33-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://storageacmzaqodcounter76[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://concludesgroping[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://easyk183[.]sg-host[.]com/us/do[.]html
  •  hxxps://isudgysu7-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://isudgysu7-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://www[.]daptscpo29p3e[.]amplifyapp[.]com/
  •  hxxps://easyk181[.]sg-host[.]com/us/do[.]html?sid=2024111403593286a1bdf885f475b4e8&kw=[.]us[.]04[.]desktop[.]windows[.]edge&subid=297538876
  •  hxxps://kkkkjiiioo-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://kkkkjiiioo-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://appliedsexzomore[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jjdcdcfvf786xcddsxccdcs[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-856-3709
  •  hxxps://siid9-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://siid9-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://siid9-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://train11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hdporno-error0x21305-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://jjjjkhwsdvshvdjm11-secondary[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(877)-452-4368
  •  hxxps://sgdstt1-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://microblocked[.]pages[.]dev/digitalserver03[.]z1[.]web[.]core[.]windows[.]net/Win01securityMyohelpline0041/
  •  hxxps://effectconsideredns[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://focusingsjdbuling[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dependingmissavxbh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d39lu017dcavbq[.]amplifyapp[.]com/
  •  hxxps://train11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://km00usemorelink037[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://fgbv-s2rtl[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-288-3826
  •  hxxps://azerasdlakjhatrwerpoiu42[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://uytgfqww4[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-980-1779
  •  hxxps://f0agxfzhqebjgctuv5[.]pages[.]dev/smart89/
  •  hxxps://missavseveral[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d245kh05i6524k[.]amplifyapp[.]com/
  •  hxxps://azerasdlakjhatrwerpoiu32[.]z8[.]web[.]core[.]windows[.]net/
  •  hxxps://koko6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://koko6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mndidhudi88733233eerr[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://y6x2hg3cpurptorefcz0[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-495-2093
  •  hxxps://carlywhitaker[.]autos/
  •  hxxps://eliminatekeysgtvb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://observersjusxforms[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ahstty1[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://kkkkjiiioo[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://kkkkjiiioo[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://savepowo[.]z27[.]web[.]core[.]windows[.]net/?phone=09-70-18-38-65
  •  hxxps://isudgysu8[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://consumptionusersd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://r5nmmyilszflcpfia0z7fosalruuhpvhvnfzvncepxuzojld8yw9u[.]pages[.]dev/smart89/
  •  hxxps://isudgysu7ed[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://www[.]d19r4wsj8w16sd[.]amplifyapp[.]com/
  •  hxxps://measuremissavgets[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sgdstt1[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://smhdgy[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-707-7338
  •  hxxps://smhdgy[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-772-8022
  •  hxxps://siid10-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hdporno-error0x21312-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://jyghsjhdfgjhsdjhfgj[.]z1[.]web[.]core[.]windows[.]net/Er0Win8helpline76/index[.]html
  •  hxxps://makeit77[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://makeit77[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://matterinsertgub[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ambayu8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://pontyshell[.]b-cdn[.]net/
  •  hxxps://virtuallypathwaysocu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://koko7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://koko7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://weert2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ditenudedittaditenud[.]z7[.]web[.]core[.]windows[.]net/dentoundemakem0rem0neyclickt0clickmorningshiftwalebachesitemakem0rem0neyclickt0clickhjhjhmorningshiftwalebachesitemakem0rem0neyclickt0clickmorningshiftwalebachesite[.]html
  •  hxxps://ahstty0-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahstty0-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://nmk00mainworld084[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://newf22[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://newf22[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://liamblake[.]autos/
  •  hxxps://easyk207[.]sg-host[.]com/us/do[.]html
  •  hxxps://www[.]d25u9fpb7qt4m9[.]amplifyapp[.]com/
  •  hxxps://www[.]d1fw15940kb3qx[.]amplifyapp[.]com/
  •  hxxps://sgdstt9-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://track7[.]sdzqq3144a3[.]com/
  •  hxxps://u4ym4oibvnodzufkugno[.]pages[.]dev/smart89/
  •  hxxps://contentaddingsxh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d2p46lku58cpe2[.]amplifyapp[.]com/
  •  hxxps://14thr3t5g1y18511[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://elitedow[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://vivihornymovies[.]shop/billz/zipz[.]php
  •  hxxps://isabelrodriguez[.]autos/
  •  hxxps://hdyttt2-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jutt10[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jutt10[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://msndehwerioweuriu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sherr10[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://watchinglogivdc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hdyttt4-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hdyttt4-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sexstatusufiual[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://graceanderson[.]autos/
  •  hxxps://sfssgshsgdhgd01dfhdfjds[.]z33[.]web[.]core[.]windows[.]net/ssdfhs01[.]html
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ftty2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://www[.]d1y42o6on2o63b[.]amplifyapp[.]com/
  •  hxxps://www[.]d29d90dgvptna9[.]amplifyapp[.]com/
  •  hxxps://detainedinskerlfysx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://weert1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]d3n4h43uz838ew[.]amplifyapp[.]com/
  •  hxxps://track2[.]2mdhzcz23a10[.]com/
  •  hxxps://hhjad032jsd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://indojustdflattered[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wiefefioweuriouriuweiru[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jutt5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jutt5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://quinnreyes[.]autos/
  •  hxxps://sgdstt122-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sgdstt122-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mhdsgut7-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mhdsgut7-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://lifestylemissavcg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://12th9z2c3p43352[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://iyuc6bl80gmrpp[.]pages[.]dev/smart89/
  •  hxxps://p0rngetteesntries[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sjdgttc8-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sherr7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://jutt8[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://smhdgy1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-403-5578
  •  hxxps://jcdhjjxx67sxdxcdsds[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-877-730-7933
  •  hxxps://till7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://12thr1n9g5s45122[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://missavpornographic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weert1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://weert1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://ambayu5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ambayu5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://liteakocfsbzo[.]z9[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://missavxbphysical[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://koko9-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://koko9-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ariabennett[.]autos/
  •  hxxps://foremostinsrtd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ambayu8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ambayu8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dfghdfhfh01dfgdfhdfhs[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://workplaceaction[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d20feyglasfcjf[.]amplifyapp[.]com/
  •  hxxps://www[.]d6bwtj5thn4i4[.]amplifyapp[.]com/
  •  hxxps://newf11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://newf11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://koko9[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://oliviasimmons[.]autos/
  •  hxxps://ahdgygg5[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://www[.]dl18x0ud5aw5j[.]amplifyapp[.]com/
  •  hxxps://mhdsgut6-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://mhdsgut6-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://www[.]d3linfa2rgv3qg[.]amplifyapp[.]com/
  •  hxxps://darrenshapiro[.]autos/
  •  hxxps://serviceca11he1appca11he1pn0w112[.]pages[.]dev/
  •  hxxps://sjdgttc9[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://edmvtyiso5dhadnhm[.]pages[.]dev/smart89/
  •  hxxps://exploratorystumbled[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://twdcghd6734fgwe[.]pages[.]dev/
  •  hxxps://newf44[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://newf44[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://www[.]d1e6rja72mgv3c[.]amplifyapp[.]com/
  •  hxxps://pathwaysazoutlined[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://makeit55[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://makeit55[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://fix555-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://concernusingnuyd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://createdwbsfederal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://work1212[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://work1212[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://aa0tjq43a3wg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://labeledmissavgth[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weert2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://weert2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sunday11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sunday11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://siid5[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://siid5[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxp://flurss03p01[.]club/werrx01USAHTML/?bcda=
  •  hxxps://ajsytg5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-224-1892
  •  hxxps://main[.]d3e3i89ek63ubz[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://akdjjejj[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://elevationactivityfg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://lucasmontgomery[.]autos/
  •  hxxps://appliedvcformer[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d1bntnt9d1d4k[.]amplifyapp[.]com/
  •  hxxps://jutt7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jutt7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nnjkkzaxxs767zzszsx[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-844-398-0524
  •  hxxps://flc-adg[.]pages[.]dev/
  •  hxxps://koko5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://koko6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://koko6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://bhhyy7-secondary[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(877)-348-6560
  •  hxxps://jutt7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://main[.]d31dbjn1yck4eg[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://harrykeller[.]autos/
  •  hxxps://gehubnannuallyku[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://siid9[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://siid9[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://preventivecarried[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://till9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://storagea01904321[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://ssnqokyxwbjeh4kociblt8dcsjniarwkmgfhdwi0ovmit77yytc[.]pages[.]dev/smart89/
  •  hxxps://mostlyconsequences[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sherr5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sherr5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://responsesimilar[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cleartrlkmas3w[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://developsmissavg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://specifiedcreatedazs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adminismissavx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]dqzj1y0xho27g[.]amplifyapp[.]com/
  •  hxxps://www[.]d37cbmms3bkfgn[.]amplifyapp[.]com/
  •  hxxps://track6[.]2dxcc135sd6[.]com/
  •  hxxps://furthermissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://elliejohnson[.]autos/
  •  hxxps://sona7[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://hdporno-error0x21309-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://blue-hill-0dcd59710[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://directorygran[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://www[.]dj6u77tveojma[.]amplifyapp[.]com/
  •  hxxps://19julymicrobug[.]pages[.]dev/
  •  hxxps://nnnnnhhhh-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://storageaccounterms76[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://ppo-one[.]vercel[.]app/
  •  hxxps://130nov26ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://130nov26ww[.]z13[.]web[.]core[.]windows[.]net/?gad_source=5&gclid=EAIaIQobChMIxpHArvnZiQMVMe31Ah3ihwpWEAEYASAAEgJs-_D_BwE/
  •  hxxps://zsbzbkerpdnr[.]pages[.]dev/smart89/
  •  hxxps://sona10-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://koko7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sherr10-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sherr10-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://madelineperkins[.]autos/
  •  hxxps://sgdstt122[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://sgdstt122[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://koko5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://aiusytfgv1-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-597-6621
  •  hxxps://jellyshake[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://www[.]d19tx5jycjlbl6[.]amplifyapp[.]com/
  •  hxxps://stratifiedmissav[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://sourcedadditionalbdcy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yuu5-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://resourcerfvadvances[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://till8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://app-mac-daem0n1[.]pages[.]dev/
  •  hxxps://substancequatowards[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mhdsgut6[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mhdsgut6[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://www[.]d37ufhepep0enm[.]amplifyapp[.]com/
  •  hxxps://14thj8d2w7x80511[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ftty5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ftty5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://segmentcostbiogets[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gusd-6sw5c[.]ondigitalocean[.]app/jsrkhk09Wn0786xhrkx/index[.]php?phone=1-860-374-9977
  •  hxxps://sherr5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sherr5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://protectinaccurate[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://storageaslg320[.]z13[.]web[.]core[.]windows[.]net/Mac08Ay0Er08d8d77/index[.]html
  •  hxxps://bftiekalosczo[.]z28[.]web[.]core[.]windows[.]net/wintossu/?bcda=1-015-888-8888
  •  hxxps://desktop-device-alert-2323[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fssdgdshfhjdsgs06ghfdh[.]z13[.]web[.]core[.]windows[.]net/dhffffd[.]html
  •  hxxps://easyk205[.]sg-host[.]com/us/do[.]html
  •  hxxps://hdyttt2[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://regulatingmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://respondmissav[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fvc12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-891-4968
  •  hxxps://multiplesafewords[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://lcbb1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-385-1775
  •  hxxps://punsius[.]pages[.]dev/M5qalDy3/
  •  hxxps://www[.]d2w0cvrvb4jvzt[.]amplifyapp[.]com/
  •  hxxps://www[.]d38uvwvx5lztbr[.]amplifyapp[.]com/
  •  hxxps://www[.]d2vfck7xeflhfm[.]amplifyapp[.]com/
  •  hxxps://fvc18-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-920-8892
  •  hxxps://respondedmissavcg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bzxr1tfchwjkqxjr8ftb[.]pages[.]dev/smart89/
  •  hxxps://yuu5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://yuu5[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ijqmxrhbmvl9nqwgnmqhkqj3jvrdx1ps4wxwko5c[.]pages[.]dev/smart89/
  •  hxxps://app-win-daem0n-21[.]pages[.]dev/
  •  hxxps://yuu7[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://voyagedacruise[.]com/
  •  hxxps://storageaccounter23[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://animatemodeling[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hgii5[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://hgii5[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ajsytg4-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-707-7338
  •  hxxps://ld0fiqsqyxcb[.]pages[.]dev/smart89/
  •  hxxps://siid10[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://permissiverevealingsxz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gznevmlk8ah61yyjaj[.]pages[.]dev/smart89/
  •  hxxps://www[.]d2gm1ty7up2x1y[.]amplifyapp[.]com/
  •  hxxps://storagenona0190[.]z13[.]web[.]core[.]windows[.]net/Win08Ay0Er08d8d77/index[.]html
  •  hxxps://sunday44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sunday44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ftty2[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://siid5-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://abigailgrayson[.]autos/
  •  hxxps://gsdgdw52332r23[.]pages[.]dev/
  •  hxxps://sgdstt9[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://110nov024ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yesterdayhopping[.]b-cdn[.]net/
  •  hxxps://sororitiesinp0rnshf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://primesnamesuir[.]b-cdn[.]net/
  •  hxxps://hdyttt4[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://bigfour[.]pages[.]dev/
  •  hxxps://ambayu5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://ambayu5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sherr7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sherr7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://referencebyteshungby[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reasonabadventsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fixahaser[.]tech/
  •  hxxps://stydwefgcgyms231[.]pages[.]dev/
  •  hxxps://11th7d3f5z45121[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ftty6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ftty6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://karensmith[.]autos/
  •  hxxps://specifiedoccursx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wdax15-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=18553241904
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://njuiooooii[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sona8[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sona8[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://isudgysu7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://isudgysu7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://currentviewsupp0rtfg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sjdgttc8[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://fix555[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://fix555[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://charismaticrelax[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://vulnerablelofivoprmis[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ozcfbsitlakoe[.]z38[.]web[.]core[.]windows[.]net/wintossu/?bcda=1-833-714-3985
  •  hxxps://jackholloway[.]autos/
  •  hxxps://lwhbiscguhwam[.]z4[.]web[.]core[.]windows[.]net/?Anph=1-888-711-5060
  •  hxxps://thankful-desert-0ba97e010[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://hgii5-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hgii5-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://hgii5-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://sunday33[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85549-14992
  •  hxxps://sona10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sona10[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://yzkgxjyz0y4417anol[.]pages[.]dev/smart89/
  •  hxxps://yerishtakyakehlatahaiji[.]pages[.]dev/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.