2024-05-06 - Tech Support Scam - Phishing Capmapign Observation Alert

134 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed134 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

•  hxxps://sexyfuckgamesgetxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://koenpearson[.]autos/see/noises/?filteredId=1kFqu7T4
•  hxxps://gtexvslovefuckhubs[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://getwatchp0rnshubs[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://laineyayala[.]autos/cosmic/lighted/
•  hxxps://microsoft-support134[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://giv9[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-(855)-444-0592
•  hxxps://pics116[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://jasminerusso[.]autos/see/noises/?filteredId=hkQN7uuu/
•  hxxps://bhpki2z9ok62u[.]pages[.]dev/smart89/
•  hxxps://apppdf7a24[.]z13[.]web[.]core[.]windows[.]net/Win0security-helpline07/index[.]html?ph0n=+1-000-000-0000
•  hxxps://marissachambers[.]autos/see/noises/
•  hxxps://yvc66rm5mw4w[.]pages[.]dev/smart89/
•  hxxps://futmetro[.]com/6f52cfdd4fe8d766728c7f1e604562e6/webs[.]mp4
•  hxxps://microsoft-support143[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://fvdisuyy[.]s3[.]eu-north-1[.]amazonaws[.]com/Winacts/Wi0n0Err0Chtpr00010/index[.]html?phone=+1-844-200-1340
•  hxxps://microsoft-support090[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://quinnzhang[.]autos/cosmic/lighted/
•  hxxps://marquesstanley[.]autos/cosmic/lighted/
•  hxxps://seanmacdonald[.]autos/elements/periodic/
•  hxxps://1728362767[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-96-52
•  hxxps://billyfrederick[.]autos/see/noises/?filteredId=Lc2rCygq
•  hxxps://bafkreid2sritou3nqmvs5fyoqdftsbfaxa5ovsyzipxhkplqmbp7ihau2y[.]ipfs[.]nftstorage[.]link/
•  hxxps://teenmegaworldxxs[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://miriampham[.]autos/elements/periodic/
•  hxxps://frantlydom[.]com/1ad02c55480c833f4595bba1a4dee732/webs[.]mp4
•  hxxps://fdgdsgt[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://hotcandylandxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://windows-security-alert-n4lum[.]ondigitalocean[.]app/
•  hxxps://luisdodson[.]autos/cosmic/lighted/
•  hxxps://microsoft-support123[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://dnrfeaz4q5ns-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-88-36
•  hxxps://khrthrowhnawrojgonruwg[.]azurewebsites[.]net/
•  hxxps://karsynrussell[.]autos/elements/periodic/?sun=ddd7wizz
•  hxxps://sierrajarvis[.]autos/elements/periodic/
•  hxxps://aaaaaaaaaaaajkjaa[.]z5[.]web[.]core[.]windows[.]net/MacJsPxl077/index[.]html
•  hxxps://microsoft-support079[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://silver114[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://rubengentry[.]autos/see/noises/
•  hxxps://hentaireadgetxdecoms[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://saniyahmays[.]autos/cosmic/lighted/
•  hxxps://hmgjmgk[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://allp0rncomicsx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://amht38eh3e3f98ox0ld1rc4h3fjcowz98ldjp5hek8[.]pages[.]dev/smart89/
•  hxxps://tatewiley[.]autos/cosmic/lighted/
•  hxxps://umg-kokala-bhosda[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://pedromayo[.]autos/elements/periodic/
•  hxxps://laurenspencer[.]autos/elements/periodic/
•  hxxps://liliafisher[.]autos/cosmic/lighted/
•  hxxps://parishenderson[.]autos/elements/periodic/
•  hxxps://ets3qe9ooms8t6i8[.]pages[.]dev/smart89/
•  hxxps://apple105[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://dirtytalks30[.]b-cdn[.]net/wedn[.]html
•  hxxps://xpvhrteufessmjweak[.]pages[.]dev/smart89/
•  hxxps://apppdf7a14[.]z13[.]web[.]core[.]windows[.]net/Win0security-helpline07/index[.]html?ph0n=+1-000-000-0000
•  hxxps://jewelcline[.]autos/elements/periodic/
•  hxxps://3316582659[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-96-52
•  hxxps://realitykingsgetbytesp0rn[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://madysonhumphrey[.]autos/cosmic/lighted/
•  hxxps://nataliadickerson[.]autos/see/noises/
•  hxxps://idfghjkjhg[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://kamrynlucero[.]autos/elements/periodic/
•  hxxps://microsoft-support095[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://65895626984-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-66-85
•  hxxps://ju4joaefnqwnkf[.]z13[.]web[.]core[.]windows[.]net/Win/index[.]html?phone=null
•  hxxps://tyrellgill[.]autos/elements/periodic/
•  hxxps://wowlogistics2may5w[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://apple108[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://ysgffs-gfdyye[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://microsoft-support146[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://investdollarspro[.]com/010au/?kllklkkkf
•  hxxps://catchinggu[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://arabi[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://jdgscdifkfgdieg[.]z19[.]web[.]core[.]windows[.]net/Er0Win8helpline76/index[.]html
•  hxxps://afggwin10[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://getubsgtpornburst[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://bakjhguyghjk[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://thalialeon[.]autos/elements/periodic/
•  hxxps://gowaaaja[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://sika[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://wowlogistics1may2m[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://watchmygfxxme[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://team30[.]d2bkogfcobk8ik[.]amplifyapp[.]com/?gclid=EAIaIQobChMIs7u3-OnphQMVdJGDBx3uRgkGEAEYASAAEgKK1fD_BwE
•  hxxps://rosemaryboyer[.]autos/see/noises/
•  hxxps://scagrsthsrhrshsrg[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://mariomoyer[.]autos/see/noises/
•  hxxps://teaganbird[.]autos/see/noises/
•  hxxps://footballteez[.]com/3cc7cb2101a7547dbdc5bd3ab467833c/webs[.]mp4
•  hxxps://quintonchan[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://d2zxhsnjx4bnumrnko[.]pages[.]dev/smart89/
•  hxxps://richardsimmons[.]autos/elements/periodic/
•  hxxps://abhjggy[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://microsoft-support088[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://bahgytui[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://www[.]assmaniac[.]com/?1008690
•  hxxps://kyleighmayer[.]autos/see/noises/
•  hxxps://bafybeid7rawemqpbxosrjcq5pucxjjskx6kvus2zi3prmrggso5r7baika[.]ipfs[.]cf-ipfs[.]com/
•  hxxps://charleemiles[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://allpornsitesjppass[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://98iuy98o[.]s3[.]eu-north-1[.]amazonaws[.]com/prblm/Wi0n0Err0Chtpr00010/index[.]html?phone=+1-888-889-5561
•  hxxps://shirleyholden[.]autos/see/noises/
•  hxxps://kayajimenez[.]autos/elements/periodic/
•  hxxps://digdickhumiliationvideos[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://rebekahvaughan[.]autos/cosmic/lighted/
•  hxxps://flirt4gtep0rnfree[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://eddyjtvfpavz[.]pages[.]dev/smart89/
•  hxxps://esperanzadonaldson[.]autos/see/noises/
•  hxxps://hamaree[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://bafybeifl3qwgq3rqrht2racbspomgwmm67gfffqgebey7nxcjqd3o3j4eu[.]ipfs[.]cf-ipfs[.]com/
•  hxxps://lindaparker[.]autos/elements/periodic/
•  hxxps://ejhutiyu[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://vsxfvsevd[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://kianhanson[.]autos/cosmic/lighted/
•  hxxps://douglassuarez[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://emmaleeflores[.]autos/cosmic/lighted/
•  hxxps://hotpornphotosgets[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://tentwelvesoftware[.]com/350934c173490a93e89cba4ac77fb76d/webs[.]mp4
•  hxxps://microsoft-support094[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://mariafleming[.]autos/cosmic/lighted/
•  hxxps://imgg1-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-678-6592
•  hxxps://isabellachambers[.]autos/elements/periodic/?sun=VXhD59v7
•  hxxps://mireyaberry[.]autos/see/noises/
•  hxxps://dhanahg[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://adultdvdtalksxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://icumehai[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://deewanaaa[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://vnbgvgchnfh[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://javiermontoya[.]autos/cosmic/lighted/
•  hxxps://emmawalton[.]autos/elements/periodic/?sun=ddD7WIzz/
•  hxxps://zaynemarks[.]autos/elements/periodic/
•  hxxps://jennymaldonado[.]autos/elements/periodic/
•  hxxps://getxxonlyfans[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://microsoft-support139[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://microsoft-support084[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://forhertubemixretro[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://nikolasbradley[.]autos/cosmic/lighted/
•  hxxps://kiuytiuyt[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://4926542409-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-88-36
•  hxxps://vaughnpatrick[.]autos/see/noises/
•  hxxps://20914815545-secondary[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://poalr[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://dacasrfvrgsbhbdx[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://willowpatel[.]autos/see/noises/
•  hxxps://dfzafgrgfsvrsr[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://fiuytrejh[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://dmr70[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=+1-(855)-444-0457
•  hxxps://apppdf11a11[.]z13[.]web[.]core[.]windows[.]net/Win0security-helpline07/index[.]html?ph0n=+1-000-000-0000
•  hxxps://bdggwin11[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://fuckableteensp0rn[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://brodiefuentes[.]autos/elements/periodic/
•  hxxps://apple107[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://marceloleonard[.]autos/see/noises/
•  hxxps://dravenhicks[.]autos/elements/periodic/
•  hxxps://rhysbond[.]autos/cosmic/lighted/
•  hxxps://alexisgarner[.]autos/see/noises/
•  hxxps://decvincii[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://keonbernard[.]autos/elements/periodic/
•  hxxps://alaynadalton[.]autos/see/noises/
•  hxxps://fcacthii[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://sdgsthdrtet[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://bcjhfuiuiy[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://kyleegreene[.]autos/see/noises/
•  hxxps://kyanblair[.]autos/elements/periodic/
•  hxxps://d14aghq1ol5x2[.]cloudfront[.]net/6cefee8b5/9183djd1jiqwjdi/index[.]html?num=0101%20(408)%20694-3619
•  hxxps://silver115[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://teemstbesdinfhy[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://jazminsmith[.]autos/see/noises/
•  hxxps://pics106[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://shawnharrison[.]autos/cosmic/lighted/
•  hxxps://sunop0rnotubes[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://amygregory[.]autos/elements/periodic/
•  hxxps://microsoft-support020[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://nathanaelayala[.]autos/elements/periodic/
•  hxxps://giuytfgkju[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://jessicaroach[.]autos/see/noises/
•  hxxps://jerrymoreno[.]autos/see/noises/
•  hxxps://albeli[.]z6[.]web[.]core[.]windows[.]net/Win0belzer0sys07/index[.]html
•  hxxps://viviangonzalez[.]autos/elements/periodic/
•  hxxps://meoti-virus-kimba[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://teaganchang[.]autos/cosmic/lighted/
•  hxxps://2ndkxjperrrrr9s76955[.]z31[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
•  hxxps://microsoft-support135[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://ricardocollier[.]autos/cosmic/lighted/
•  hxxps://fze9w4s52eqe0zwg[.]azureedge[.]net/
•  hxxps://paytonpeters[.]autos/see/noises/
•  hxxps://brodythompson[.]autos/see/noises/
•  hxxps://quintonfrey[.]autos/elements/periodic/
•  hxxps://roycekidd[.]autos/see/noises/
•  hxxps://pics104[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://sophiedominguez[.]autos/elements/periodic/
•  hxxps://tiwicogotagavisu-7dkwfn3gjq-uc[.]a[.]run[.]app/minmacs/00Macguiededmac0096/index[.]html
•  hxxps://qdo0ogp1f6o[.]pages[.]dev/smart89/
•  hxxps://ehugkauwr[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://neilbridges[.]autos/see/noises/
•  hxxps://tivi4loci2cdph[.]pages[.]dev/smart89/
•  hxxps://leamontoya[.]autos/see/noises/
•  hxxps://prestongood[.]autos/elements/periodic/
•  hxxps://hsit0xgfsr-news[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://1873574259[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://selenastokes[.]autos/cosmic/lighted/
•  hxxps://tron2q1ln[.]z13[.]web[.]core[.]windows[.]net/Wind0s01Ersys44/index[.]html
•  hxxps://microsoft-support071[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://aas14-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-287-5016
•  hxxps://xvtizliizwrkjl0kymu9[.]pages[.]dev/smart89/
•  hxxps://rdtetsyutfuyfrxytf[.]azurewebsites[.]net/
•  hxxps://nicheblogedits[.]com/0ced6aca49e106f6230b9b6da55acd0e/webs[.]mp4
•  hxxps://rosehood[.]autos/elements/periodic/
•  hxxps://rebtekpopsecto[.]pages[.]dev/
•  hxxps://4aprilmac03-secondary[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://52i33hl07l00i7wq[.]azureedge[.]net/010au/?kllklkkkf
•  hxxps://sorenkim[.]autos/elements/periodic/
•  hxxps://3rdjp04305cc1042x0[.]z31[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
•  hxxps://4926542409[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-18-72-82
•  hxxps://4926542409[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://microsoft-support142[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://chutiyagauravverma[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://andreasmayer[.]autos/elements/periodic/
•  hxxps://lorenzomueller[.]autos/elements/periodic/
•  hxxps://pics112[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://roderickdennis[.]autos/see/noises/
•  hxxps://wgrtegagaer[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://pics117[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://lanaberger[.]autos/cosmic/lighted/
•  hxxps://apppdf7a6[.]z13[.]web[.]core[.]windows[.]net/Win0security-helpline07/media/_Fm7-alert[.]mp3
•  hxxps://batbaatme[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://bjgyrtd[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://tesscarson[.]autos/see/noises/
•  hxxps://lyriclyons[.]autos/elements/periodic/
•  hxxps://sf8ax4rd941zj78k[.]azureedge[.]net/010au/
•  hxxps://tonightsgirlfriendxsx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://dcwaanaaa[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://aswsssw111[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-233-1842
•  hxxps://lylameza[.]autos/cosmic/lighted/
•  hxxps://22022756214-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-66-85
•  hxxps://taylorgreer[.]autos/cosmic/lighted/?filteredId=1kFqu7T4
•  hxxps://microsoft-support152[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://brentchambers[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://windows-alert-xmpf7[.]ondigitalocean[.]app/
•  hxxps://microsoft-support017[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://terrellmoody[.]autos/elements/periodic/
•  hxxps://apple101[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://sagevargas[.]autos/elements/periodic/
•  hxxps://abjiugyu[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://bafybeigvl5xkj47ncu35veywpkw5ppwff4qfc6tdpc5q4ydazngo4aaul4[.]ipfs[.]cf-ipfs[.]com/
•  hxxps://rehov15[.]buzz/pop/pop/?tk=ck62yn7s0m4zmb35psrlyvgvlaowcdpu
•  hxxps://lydiamcfarland[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://appggg12[.]z19[.]web[.]core[.]windows[.]net/Win0security-helpline07/index[.]html?ph0n=+1-000-000-0000
•  hxxps://17080188959[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-18-72-82
•  hxxps://marlieaguilar[.]autos/see/noises/
•  hxxps://microsoft-support151[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://ramiromccormick[.]autos/see/noises/
•  hxxps://granean[.]com/e8f9ef449d708fc4bc326b76b9e19328/webs[.]mp4
•  hxxps://qa5jezcggzkcadmno[.]pages[.]dev/smart89/
•  hxxps://gcowahgfr[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://v0ir12aztvkb0po[.]pages[.]dev/smart89/
•  hxxps://8952627338[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-18-72-82
•  hxxps://skylahuang[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://nigelfrazier[.]autos/cosmic/lighted/
•  hxxps://tiffanykaufman[.]autos/see/noises/
•  hxxps://saniyahashley[.]autos/cosmic/lighted/
•  hxxps://makaylamcclain[.]autos/see/noises/
•  hxxps://weweuioi132kk1j23kj2j3[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://marisacombs[.]autos/cosmic/lighted/
•  hxxps://techservicehub02[.]z13[.]web[.]core[.]windows[.]net/Wi0n0erSHaa0mpAlert039/index[.]html
•  hxxps://jp[.]dv-tube[.]com/
•  hxxps://chak[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://windowsprogramdangererrorfoundcritical[.]kesug[.]com/?i=3
•  hxxps://joannabeasley[.]autos/cosmic/lighted/
•  hxxps://cguuygytfy[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://mniest[.]s3[.]amazonaws[.]com/popupfilenew/index[.]html
•  hxxps://leandrobarr[.]autos/elements/periodic/
•  hxxps://mvmfmgmbbneribnre[.]azurewebsites[.]net/
•  hxxps://leslyjimenez[.]autos/see/noises/
•  hxxps://windows-defender-if77z[.]ondigitalocean[.]app/
•  hxxps://24890320051[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://24890320051[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-18-72-82
•  hxxps://avantikkkaa[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://azulsilva[.]autos/see/noises/
•  hxxps://themilkmoviesxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://especiallystrongestgirls[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://especiallystrongestgirls[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://blowjobsgetpointsgt[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://microsoft-support091[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://windows-defender-xbpcd[.]ondigitalocean[.]app/
•  hxxps://jeromelara[.]autos/see/noises/
•  hxxps://bafybeifxrddpqgi7i6ktzicioqw357oi7jz5xfr73vjhpjmn2pkesrqmcm[.]ipfs[.]cf-ipfs[.]com/
•  hxxps://osvaldohancock[.]autos/see/noises/
•  hxxps://roryhiggins[.]autos/cosmic/lighted/
•  hxxps://mbljormkgrnw0wnmji[.]pages[.]dev/smart89/
•  hxxps://s3wqokqmcbx[.]pages[.]dev/smart89/
•  hxxps://fapstered[.]com/50d82b6044b00074fba5df40bd56ded8/webs[.]mp4
•  hxxps://mollyjennings[.]autos/cosmic/lighted/
•  hxxps://mckaylamarshall[.]autos/cosmic/lighted/
•  hxxps://nathanialsuarez[.]autos/see/noises/
•  hxxps://jocelynhampton[.]autos/elements/periodic/
•  hxxps://llk20[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-727-322-3809
•  hxxps://emaaraty[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://zimk[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://doiw0zuhcw9rosjhic[.]pages[.]dev/smart89/
•  hxxps://dejamccann[.]autos/cosmic/lighted/
•  hxxps://madisonlambert[.]autos/cosmic/lighted/
•  hxxps://moriahsellers[.]autos/cosmic/lighted/
•  hxxps://3777427659-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-88-36
•  hxxps://silver107[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://8301115676-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-66-85
•  hxxps://microsoft-support140[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://jp2ndkxrjp932005023[.]z31[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
•  hxxps://01326169497-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-66-85
•  hxxps://natalyrowland[.]autos/cosmic/lighted/
•  hxxps://zkapro[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://m6qn8uybdrdusxbc[.]azureedge[.]net/
•  hxxps://vivianaburgess[.]autos/see/noises/
•  hxxps://lindabeltran[.]autos/cosmic/lighted/
•  hxxps://3777427659[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://zaidenwang[.]autos/cosmic/lighted/
•  hxxps://waylonstafford[.]autos/elements/periodic/
•  hxxps://sydneyclark[.]autos/see/noises/
•  hxxps://rorykim[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://elainameyer[.]autos/cosmic/lighted/
•  hxxps://berni[.]blob[.]core[.]windows[.]net/$web/index[.]html
•  hxxps://holiyaaraa[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://nzh90ulwsg[.]pages[.]dev/smart89/
•  hxxps://jsbhsghfs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ewaraatee[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://tronlmv4e[.]z13[.]web[.]core[.]windows[.]net/?_event=ab469825ba25347705c9f2f1d9de6f23
•  hxxps://dmr31[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=+1-(855)-444-0457
•  hxxps://parmad[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://ftrvn1y8kq[.]pages[.]dev/smart89/
•  hxxps://microsoft-support072[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://microsoft-support137[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://jiska[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://nzat[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://semajfospa[.]pages[.]dev/wirhaja/
•  hxxps://violetjensen[.]autos/cosmic/lighted/
•  hxxps://gauravvermabhdwahaiganduhaichutiyahai[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://jwindibdsuanijnebtcvsajnwiejbduxzs[.]azurewebsites[.]net/
•  hxxps://renesimon[.]autos/elements/periodic/
•  hxxps://20308093339-secondary[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://20308093339-secondary[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-88-36
•  hxxps://lizbethwu[.]autos/see/noises/
•  hxxps://mkm75-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-235-9992
•  hxxps://8iuyagd87[.]d3qdqt6tx4j73j[.]amplifyapp[.]com/Wi0n0Err0Chtpr00010/index[.]html?phone=+1-844-200-1340
•  hxxps://hammerhead-app-xmzva[.]ondigitalocean[.]app/
•  hxxps://silver105[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://faishanabllee[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://p0rndurablegetxcv[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://hentaivideoworldxx[.]z13[.]web[.]core[.]windows[.]net/3[.]html
•  hxxps://lanamccarty[.]autos/see/noises/
•  hxxps://forgettubeshubsbyetsgf[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://charleecarson[.]autos/see/noises/
•  hxxps://microsoft-support132[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://julesxxjordan[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://systemupdateon11[.]azurewebsites[.]net/Wi0n0Err0aBh00073/index[.]html
•  hxxps://hgahgsf-shvgsdfs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://microsoft-support073[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://afox2ate9z3zj7sur[.]pages[.]dev/smart89/
•  hxxps://govindaaamma[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://piypikrpikpekeruuyaw[.]azurewebsites[.]net/
•  hxxps://quintenhester[.]autos/see/noises/
•  hxxps://assmaniac[.]com/?1009850
•  hxxps://djhgfyikj[.]z28[.]web[.]core[.]windows[.]net/
•  hxxps://tronv7ugj[.]z13[.]web[.]core[.]windows[.]net/?_event=85a653122139f861dd42ec116ab90f6b
•  hxxps://sheldonkaiser[.]autos/elements/periodic/
•  hxxps://manoj3[.]d1fy7g12ppprp2[.]amplifyapp[.]com/
•  hxxps://lydiaschmidt[.]autos/see/noises/
•  hxxps://microsoft-support076[.]b-cdn[.]net/Wi0n0MntyEr00170887/index[.]html
•  hxxps://aliciajenkins[.]autos/cosmic/lighted/
•  hxxps://mojkijihsnhknbkjrv[.]b-cdn[.]net/jpvalayehaiissechlaio%20file%20ko[.]html
•  hxxps://9190603809[.]z28[.]web[.]core[.]windows[.]net/?phone=09-70-38-96-52
•  hxxps://launchedmaleperf0rmesxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html
•  hxxps://caseyperez[.]autos/elements/periodic/?sun=vxhd59v7
•  hxxps://madysonblack[.]autos/see/noises/?filteredId=1kFqu7T4

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

• If you entered any personal information, change all passwords and alert your bank and credit card companies.
• Enable multi factor authentication to prevent access from attacker.
• If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
• Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
• Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.