2024-02-28 - Tech Support Scam - Phishing Capmapign Observation Alert

on

57 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed57 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://danaestrada[.]autos/serene/dune/?box=violet
  •  hxxps://konishua[.]site/lander/test-win_1707395361/index[.]php
  •  hxxps://xsecures21457952314764555546[.]pages[.]dev/
  •  hxxps://www[.]strange-payne[.]142-93-134-143[.]plesk[.]page/
  •  hxxps://blue-sand-007e25010[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://2013234-secondary[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://lemon-river-0d8c52010[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://lemon-river-0d8c52010[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://helenaandrews[.]autos/serene/dune/?box=green
  •  hxxps://dadadas-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxp://wn7[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-21-25
  •  hxxps://cwofsmhsoujj[.]pages[.]dev/smart89/?start=(0101)%2097349-47569
  •  hxxps://salmon-mushroom-022758210[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=+1-855-531-1750
  •  hxxps://gray-mushroom-0a0805110[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50333-69230
  •  hxxps://zbngfy6ztbktr4iergxcxkv0byv6oz[.]pages[.]dev/smart89/
  •  hxxps://autumnwebster[.]autos/serene/dune/?box=green
  •  hxxps://main[.]d21wjttarz6bry[.]amplifyapp[.]com/
  •  hxxps://robertboone[.]autos/serene/dune/?box=white
  •  hxxps://westjr-odakeka[.]net[.]drfas435[.]com/
  •  hxxps://roninmcgrath[.]autos/serene/dune/?box=green
  •  hxxps://qcvwcar7uwqknzgn9kmdg1zbhnpefc[.]pages[.]dev/winsupport/
  •  hxxps://xerof4[.]shop/pop/pop/?tk=jkbr0wxicj6m3fqwtkv92gstdp8a5hca
  •  hxxps://vmxydtyxspjnmmdrv5wgiwa0n4yuqa5fcqhjqsyhsaln3m[.]pages[.]dev/smart89/
  •  hxxps://soniarandolph[.]autos/serene/dune/?box=green
  •  hxxp://wn8[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-21-25
  •  hxxps://justuspearson[.]autos/serene/dune/?box=green
  •  hxxps://justuspearson[.]autos/serene/dune/?box=violet
  •  hxxps://amht38eh3e3f98ox0ld1rc4h3fjcowz98ldjp5hek8[.]pages[.]dev/smart89/
  •  hxxps://reillyquinn[.]autos/serene/dune/?box=white
  •  hxxps://kristadodson[.]autos/serene/dune/?box=violet
  •  hxxps://agreeable-forest-086a21d10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50922-87159
  •  hxxps://kalinorris[.]autos/serene/dune/?box=green
  •  hxxps://kind-sky-01b4a3e10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://kind-sky-01b4a3e10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://abagailnewton[.]autos/serene/dune/?box=green
  •  hxxps://ashtynwood[.]autos/serene/dune/?box=green/
  •  hxxps://rivupdwin002[.]nyc3[.]digitaloceanspaces[.]com/Wi00nAmr0Erhelp0744/index[.]html?ph0ne=%201-866-566-6640
  •  hxxps://kind-field-0b139b610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://kind-field-0b139b610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://kind-field-0b139b610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://cj6dbtckj0xcxt6ydbhdzm2fffrmwtessowswhtgdsmlcuyhbaw5ih[.]pages[.]dev/smart89/
  •  hxxps://gxjwizejkmmzkyxc0j152osfdqhjaju2kj17[.]pages[.]dev/smart89/
  •  hxxps://ashy-meadow-02d232710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://ashy-meadow-02d232710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://ashy-meadow-02d232710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://v6zx8vxockr1pxf9umjmhxssrxpyy5[.]pages[.]dev/winsupport/
  •  hxxps://infosupport-01[.]s3[.]us-east-2[.]amazonaws[.]com/4/index4[.]html?ph0ne=050-5532-6586
  •  hxxps://lively-island-0474ece10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=1-855-531-1750
  •  hxxps://allengoodwin[.]autos/serene/dune/?box=white
  •  hxxps://parischen[.]autos/serene/dune/?box=red
  •  hxxps://schwabbank[.]wiki/eepowiralpwq032[.]ga/Call-Security-Helpline-for-resolve-issues0x1/helpCH0Er0/index[.]html
  •  hxxps://westjr-odakeka[.]net[.]drfas145[.]com/
  •  hxxps://dc4mpaflzf4rw[.]cloudfront[.]net/index[.]html
  •  hxxps://bishwatma[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://3pop366[.]oldnewsupdate[.]com/
  •  hxxps://jp25feb01-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://landingcouponcode[.]online/
  •  hxxps://proud-pond-0c3f75610[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50922-87159
  •  hxxps://paytonchoi[.]autos/serene/dune/?box=green
  •  hxxps://paytonchoi[.]autos/serene/dune/?box=violet
  •  hxxps://ggraxiyzqatsxtuuncg0vqwhswkzcjiyh8jeeswzqmckxqaueslan8[.]pages[.]dev/smart89/
  •  hxxps://fugiigtfuy[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://darrellcosta[.]autos/serene/dune/?box=green
  •  hxxps://tron9aiu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://isabelewing[.]autos/serene/dune/?box=white
  •  hxxps://nr1yaxp29ukpyuhb0zyt0ujxahjlwn[.]pages[.]dev/smart89/
  •  hxxps://548sbfhdf384[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://paisleykaufman[.]autos/serene/dune/?box=green
  •  hxxps://purple-stone-047eee210[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://fakanami[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://kind-grass-011582f10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://uuwwr5[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://uuwwr5[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://uuwwr5[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://meihjzidw0caomthdd099teatzijpgxcnsrzbo4blcdevjetx[.]pages[.]dev/smart89/
  •  hxxps://delightful-mushroom-0b8ed9410[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50221-20986
  •  hxxps://tehimibopupazuye-utkw7uwsjq-uc[.]a[.]run[.]app/windesk/00Windinside0actlatest/index[.]html
  •  hxxps://s3[.]us-east-2[.]amazonaws[.]com/54ah1[.]0h[.]0h-pc-windows-l0cked-err0r-992[.]987/T9432/T9432/index[.]html
  •  hxxps://nqom90kajs90kamm[.]azureedge[.]net/0844/
  •  hxxps://www[.]notlce-umpjgkov[.]shop/ll5379/index[.]php?ip=133[.]206[.]99[.]96
  •  hxxps://taylornorris[.]autos/serene/dune/?box=green
  •  hxxps://sekor4[.]shop/pop/pop/?tk=36iar8fyk1ydwta4plcvcrjxlumhgmpe
  •  hxxps://westjr-odakeka[.]net[.]drfas243[.]com/
  •  hxxps://orange-pebble-0d7e50410[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://orange-pebble-0d7e50410[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://fsdfsjpsd-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://goodiesee[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://jpblob123[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://jpblob123[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://ioxsa1xpmmd7k7wjypxcjuuensfsnl[.]pages[.]dev/smart89/
  •  hxxps://error010xwin0226[.]z31[.]web[.]core[.]windows[.]net/W0iMyrEr0hotline0JP087/index[.]html
  •  hxxps://wwwoionnnn1n23n12n3n[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://liliannanorton[.]autos/serene/dune/?box=white
  •  hxxps://liliannanorton[.]autos/serene/dune/?box=green
  •  hxxps://jp25feb01[.]blob[.]core[.]windows[.]net/$web/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://jp25feb01[.]blob[.]core[.]windows[.]net/$web/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://annikacrosby[.]autos/serene/dune/?box=green
  •  hxxps://wwkjwkj123jk12j393939[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dev9481[.]d3byd4i23ocgat[.]amplifyapp[.]com/
  •  hxxps://libbycolon[.]autos/serene/dune/?box=violet
  •  hxxps://joyashley[.]autos/serene/dune/?box=violet
  •  hxxps://fsdsdfjp-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://fsdsdfjp-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://emerguyfyg[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://dev2729[.]d27kdovq5lchym[.]amplifyapp[.]com/?tk=V6pvldkznDOSIr70W1oCTmAa9yG84Nuf
  •  hxxps://cartergibbs[.]autos/serene/dune/?box=green/
  •  hxxps://sherlynadkins[.]autos/serene/dune/?box=violet
  •  hxxps://securitycenterservices1303023[.]tiiny[.]site/
  •  hxxps://dpmkjvy8p5e36llyyriedqyehpfgeo[.]pages[.]dev/windows/
  •  hxxps://luisnewman[.]autos/serene/dune/?box=violet
  •  hxxps://westjr-odakeka[.]net[.]drfas363[.]com/
  •  hxxps://black-pebble-0f1e31a10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50922-87159
  •  hxxps://joqkmmffxcs03cyudkjy5ky7naw6j0[.]pages[.]dev/smart89/
  •  hxxps://27febmich7[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://witty-glacier-05ab43510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://witty-glacier-05ab43510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://witty-glacier-05ab43510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxp://d1eg4sc4ih35e4[.]cloudfront[.]net/index[.]html
  •  hxxps://agreeable-sky-0d73f7710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://jplp[.]z11[.]web[.]core[.]windows[.]net/W0iMyrEr0hotline0JP087/index[.]html
  •  hxxps://proud-river-02cac4610[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=1-855-531-1750
  •  hxxps://ingridhogan[.]autos/serene/dune/?box=green
  •  hxxps://johannawhitney[.]autos/serene/dune/?box=white
  •  hxxps://agreeable-ground-0521fcb10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://agreeable-ground-0521fcb10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://teams[.]d8sd7haregqjf[.]amplifyapp[.]com/
  •  hxxp://wn5[.]pro/fr35766334a/alerte[.]php
  •  hxxps://main[.]di8sq0rb292f0[.]amplifyapp[.]com/0[.]8624906902511753
  •  hxxps://jubarawiyicefodo-utkw7uwsjq-uc[.]a[.]run[.]app/windesk/00Windinside0actlatest/index[.]html
  •  hxxps://kind-cliff-06b340d10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://gyid-763tz[.]ondigitalocean[.]app/hrkjsrmbk0786xWxINxx009jsrk0x/index[.]php
  •  hxxps://dannywillis[.]autos/serene/dune/?box=white
  •  hxxps://zejjnum7hxxlggu9dnh27jng8cukafeedibfezr[.]pages[.]dev/smart89/
  •  hxxps://webhelplineweb-01[.]s3[.]us-east-2[.]amazonaws[.]com/6/index[.]html?ph0ne=050-5532-6586
  •  hxxps://dubaara[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://makeitwithussite[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://ioehtmufmmbm[.]pages[.]dev/smart89/?start=(0101)%2097349-47569
  •  hxxps://www[.]notlce-qhzabulath[.]shop/ll5379/index[.]php?ip=61[.]207[.]96[.]192
  •  hxxps://deecood[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://2013234[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://2013234[.]z7[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://makeitwithus[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://jp25feb01[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://a3-8k9[.]pages[.]dev/
  •  hxxps://jolly-dune-0221f3710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://yellow-forest-0efe46a10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50995-72566
  •  hxxps://main[.]d1rmyh29f7g3zn[.]amplifyapp[.]com/wincts/index[.]html
  •  hxxps://purple-smoke-055aab510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://purple-smoke-055aab510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://ihmisruoska[.]fi/windows/index[.]html
  •  hxxps://kanechandler[.]autos/serene/dune/?box=red
  •  hxxps://kanechandler[.]autos/serene/dune/?box=violet
  •  hxxps://stevereyes[.]autos/serene/dune/?box=green
  •  hxxps://brave-moss-0c897a410[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://icy-hill-05687c210[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://icy-hill-05687c210[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://icy-hill-05687c210[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://3pop366[.]myfastupdate[.]com/
  •  hxxps://red-island-041e1cd10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=+1-888-261-8132
  •  hxxps://kartaaar[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://ouhb-aq5di[.]ondigitalocean[.]app/jdue09jshrk00x00wn00c9x/index[.]php
  •  hxxps://ufvskbzrquea[.]pages[.]dev/smart89/
  •  hxxps://janessadavila[.]autos/serene/dune/?box=white
  •  hxxps://gentle-field-0d7cefb10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://black-water-094fce010[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=+1-877-221-1392
  •  hxxps://wi508[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-22-23
  •  hxxp://wr105[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-21-25
  •  hxxps://nice-grass-03b396010[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://lively-hill-0b58aa710[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50995-72334
  •  hxxps://zasdf[.]xyz/
  •  hxxps://hy1vypislkjfsvckwgxoc0opiikk3pss1k[.]pages[.]dev/smart89/
  •  hxxps://secura-vis[.]com/windows/index[.]html
  •  hxxps://peiomxnqeoi38475[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-50995-72395
  •  hxxps://jjdgfkjskf-sbnfvjhsdvgfhj[.]azurewebsites[.]net/?phone=+1-866-284-7636
  •  hxxps://salmon-field-05eaaec10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://salmon-field-05eaaec10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://kelsieyates[.]autos/serene/dune/?box=violet
  •  hxxps://admire[.]ink/1102/
  •  hxxps://happy-flower-0a7a5df10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50995-72334
  •  hxxps://happy-flower-0a7a5df10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50995-72566
  •  hxxps://absirop2wkxm[.]pages[.]dev/smart89/
  •  hxxps://j2m2wb6ewxfmxyvaufuh9n2gotk8po[.]pages[.]dev/smart89/
  •  hxxps://sfjhfuexgsnxkadj[.]nyc3[.]digitaloceanspaces[.]com/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://sfjhfuexgsnxkadj[.]nyc3[.]digitaloceanspaces[.]com/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://sfjhfuexgsnxkadj[.]nyc3[.]digitaloceanspaces[.]com/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://calm-mushroom-0f17adb10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://ambitious-forest-0b008dc10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://calm-river-090d83710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50579-66478
  •  hxxps://calm-river-090d83710[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50221-20986
  •  hxxps://wwwausss9898i32i2u2[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bridgerdeleon[.]autos/serene/dune/?box=white
  •  hxxps://ftp[.]latelierit[.]fr/windows/index[.]html
  •  hxxps://ashy-coast-04d530b10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://ashy-coast-04d530b10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://pop366[.]myfastupdate[.]com/
  •  hxxps://blue-hill-099e5c610[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=
  •  hxxps://jvrpsychometrics[.]com/windows/index[.]html
  •  hxxps://imntihaa[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://green-rock-054003410[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50922-87159
  •  hxxps://pihqfkgjgyik[.]pages[.]dev/smart89/?start=(0101)%2097349-47569
  •  hxxps://bvuyvtvytvct7tfv7f7tf7f7-secondary[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://lively-coast-0af48a610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://lively-coast-0af48a610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://lively-coast-0af48a610[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://xerof13[.]shop/pop/pop/?tk=capsgvnqhmu2yzfgyjzbshqjl8mav1r7
  •  hxxps://kijmanjho[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://gaukanna[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://polite-bay-0be926310[.]4[.]azurestaticapps[.]net/werrx01USAHTML/?bcda=(0101)-50579-66478
  •  hxxps://kind-sea-04ea26110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://kind-sea-04ea26110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://kind-sea-04ea26110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://sekor7[.]shop/pop/pop/?tk=kdstvrwxdxcev4c1f9plhtog3yrejnmq
  •  hxxps://asuwbrhfdbqoeo[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-50221-20986
  •  hxxps://asuwbrhfdbqoeo[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-50922-87159
  •  hxxps://asuwbrhfdbqoeo[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-50579-66478
  •  hxxps://abiuju[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://blog[.]justine[.]cloud/werrx01USAHTML/index[.]html
  •  hxxps://gray-bay-0d9bb6310[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://gray-bay-0d9bb6310[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://yellow-smoke-07a74df10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://yellow-smoke-07a74df10[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://d13lp95xm7u943[.]cloudfront[.]net/Wi0nSh0help0secure087/index[.]html
  •  hxxps://breannaraymond[.]autos/serene/dune/?box=green
  •  hxxps://black-wave-0a7f4f110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://black-wave-0a7f4f110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://waws-prod-am2-f7242d35[.]ftp[.]p[.]azurewebsites[.]windows[.]net/windows/index[.]html
  •  hxxps://anatowadechqnikml[.]s3[.]ap-southeast-1[.]amazonaws[.]com/index[.]html
  •  hxxps://pdaeswbaxhdg[.]pages[.]dev/smart89/?start=(0101)%2097349-47569
  •  hxxps://jp25feb-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://jp25feb-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://ambitious-tree-009e5a810[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://23febmicj11[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]isaibolton[.]autos/serene/dune/
  •  hxxps://exoclick0001[.]nyc3[.]cdn[.]digitaloceanspaces[.]com/W0ind0sCurF0Ku1Ersys85/index[.]html?ph0ne2=+1-833-239-1774
  •  hxxps://wonderful-pebble-0643e9810[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://luisjones[.]autos/serene/dune/?box=white
  •  hxxps://chicagooo[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://fsdfsdfaa-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://adex-uculx[.]ondigitalocean[.]app/jdue09jshrk00x00wn00c9x/index[.]php
  •  hxxps://jakaaartaa[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://ukstoreagenew[.]z33[.]web[.]core[.]windows[.]net/Er0Win8helpline76/index[.]html
  •  hxxps://yellow-sea-052cb7110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://yuurl[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-22-23
  •  hxxps://tainp785f55server64ihy6err759bt6fhost648bg66-3mvrx6pzfa-ue[.]a[.]run[.]app/
  •  hxxps://s3[.]amazonaws[.]com/2af1[.]0f[.]0f-pc-windows-l0cked-err0r-991[.]988/T9432/index[.]html
  •  hxxps://www[.]mitteldorf[.]dk/windows/index[.]html
  •  hxxps://548sbfhdf384-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://548sbfhdf384-secondary[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://allenodom[.]autos/serene/dune/?box=green
  •  hxxps://efraadd[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://mohammadmerritt[.]autos/serene/dune/?box=green
  •  hxxps://orange-mushroom-0d3b65b10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://orange-mushroom-0d3b65b10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://orange-mushroom-0d3b65b10[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://kamrencervantes[.]autos/serene/dune/?box=red
  •  hxxps://bibhoor[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://gql1z20pgghe1wbr[.]azureedge[.]net/
  •  hxxps://witty-mud-032801810[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://witty-mud-032801810[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72566
  •  hxxps://camdenvalencia[.]autos/serene/dune/?box=green
  •  hxxps://peiomxnqeoi38475-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-50922-87159
  •  hxxps://th8fsvdsdsvd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://delightful-grass-0a555b010[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://delightful-grass-0a555b010[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://me0rkk21ro0l8bv76jcb[.]z13[.]web[.]core[.]windows[.]net/Wi0n0JryeErrinf0x096/micro[.]html?phone=[.]
  •  hxxps://me0rkk21ro0l8bv76jcb[.]z13[.]web[.]core[.]windows[.]net/Wi0n0JryeErrinf0x096/micro[.]html?phone=[.]&
  •  hxxps://rd[.]dv-tube[.]com/
  •  hxxps://4opkd4ctl5rtft1t[.]azureedge[.]net/
  •  hxxps://wr102[.]pro/fr35766334a/alerte[.]php
  •  hxxps://tronr9hj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://benewstoreaccounts[.]z28[.]web[.]core[.]windows[.]net/Er0Win8helpline76/index[.]html
  •  hxxps://cfytfutyt[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://sofiamccann[.]autos/serene/dune/?box=violet
  •  hxxps://kysonbenton[.]autos/serene/dune/?box=white
  •  hxxps://proud-bush-07166a110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50221-20986
  •  hxxps://proud-bush-07166a110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50922-87159
  •  hxxps://proud-bush-07166a110[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50579-66478
  •  hxxps://turnermcmillan[.]autos/serene/dune/?box=green
  •  hxxps://wi509[.]pro/fr35766334a/alerte[.]php?phone=09-70-18-21-25
  •  hxxps://jayleenlucas[.]autos/rebalancing/spoke/?box=green
  •  hxxps://lemon-coast-016dbf710[.]4[.]azurestaticapps[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-50995-72334
  •  hxxps://bgpadet8lo8q6jfhyl9torgdtht3j1zvtq5l4dodnskoh0[.]pages[.]dev/smart89/
  •  hxxps://wonderful-island-0cd9c4510[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://zealous-coast-063eb8810[.]4[.]azurestaticapps[.]net/windows/index[.]html?bcda=(0101)-50333-69230
  •  hxxps://nprstiudoplaxbghelqmsnoqlxntcbahyqstbgr[.]site/Wi0n0JryeErrinf0x086/index[.]html
  •  hxxps://push18k[.]z13[.]web[.]core[.]windows[.]net/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.