2024-06-19 - Tech Support Scam - Phishing Capmapign Observation Alert

57 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed57 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://appg6ty3[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://win-defender-sec-64csvx0x112[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nhgdiiepdsxxsa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-833-519-6284
  •  hxxps://adolphusisomlycyou[.]pages[.]dev/A3EMmRpx/
  •  hxxps://wegv5634rghwev[.]pages[.]dev/
  •  hxxps://vaek8ut5[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://scr31[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-884-4171
  •  hxxps://yuser02[.]pages[.]dev/
  •  hxxps://qpiqp4-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-923-7117
  •  hxxps://appt7t1[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://jjjppp6135xerus5783[.]z7[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://kwrztqftn2ov7qb[.]pages[.]dev/smart89/
  •  hxxps://awooppll221-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-884-4171
  •  hxxps://microsoft-error-pages-check-errors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://awoomi112-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://awoomi112-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://zaxscdvdfvf-vfvfbgbgbgbgbgbgb-45xup[.]ondigitalocean[.]app/
  •  hxxps://micro-service-alertc0277sb-dev[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://asiioaa-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://asiioaa-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://asiioaa-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://luuk8[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://luuk8[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk8[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://wfvhwej5634rwe[.]pages[.]dev/
  •  hxxps://rejgfiuwrgfwdf[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://dfszdfssef[.]pages[.]dev/
  •  hxxps://xdatting[.]xyz/
  •  hxxps://luuk7[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://nfbvhdfbieusdc[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://gvl1gmfec7rlzakrjfxafupvwnwbvikuecz0di1b[.]pages[.]dev/smart89/
  •  hxxps://safyasd563232[.]pages[.]dev/
  •  hxxps://zbngfy6ztbktr4iergxcxkv0byv6oz[.]pages[.]dev/smart89/
  •  hxxps://safs5623fwe[.]pages[.]dev/
  •  hxxps://asiioaa523-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://asiioaa523-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://asiioaa523-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://gfyvboilhloijl[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://sdcsd5633[.]pages[.]dev/
  •  hxxps://mut7[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://kgjeokwgeghqogierhiewtaklpsfh[.]azurewebsites[.]net/
  •  hxxps://jjk17[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://jjk17[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jjk17[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk1[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://goodmannsaul[.]z6[.]web[.]core[.]windows[.]net/
  •  hxxps://ekrgfbsbgerngf[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://4fredfxgfsdsddscsd[.]pages[.]dev/
  •  hxxps://udi3-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://udi3-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://udi3-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://kkmambzyjo[.]z32[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://shdbchdbcdsc[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://fgxfg54dxfgxg[.]pages[.]dev/
  •  hxxps://starfish-app-6ln84[.]ondigitalocean[.]app/
  •  hxxps://secure-app15-system[.]pages[.]dev/
  •  hxxps://d33v7si3v97r56[.]cloudfront[.]net/dfcb80baf/index[.]html?num=0101+%28773%29+9429-061
  •  hxxps://microsoft-alert-system-compromised[.]pages[.]dev/
  •  hxxps://weoopnnl01[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-571-8210
  •  hxxps://mjborlebvdrr[.]pages[.]dev/smart89/
  •  hxxps://wefse67utyjr5y6[.]pages[.]dev/
  •  hxxps://gjfjhgvhblihlkn[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://fyghfcghasc23fhgwegh[.]pages[.]dev/
  •  hxxps://fdbgnrgbdfsvsdf[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://micro-service-alertc0277sb-errors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mut7-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut7-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://mut7-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://mut7-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://isoallp2[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut5-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut5-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://asdcsdagh5623rfgwev[.]pages[.]dev/
  •  hxxps://gxjwizejkmmzkyxc0j152osfdqhjaju2kj17[.]pages[.]dev/smart89/
  •  hxxps://mail[.]tothedigital[.]shop/W0indbnAmd07w0in820/index[.]html
  •  hxxps://n4pyeclvlxqpe[.]pages[.]dev/smart89/
  •  hxxps://pub-26156386d0f54a95aea30594f13fbc44[.]r2[.]dev/1280[.]html
  •  hxxps://sdvsdhfvf44[.]pages[.]dev/
  •  hxxps://lseedddffs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-855-399-1004
  •  hxxps://ctrtab18[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://ctrtab18[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://aegsety[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://nac3[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://nac3[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://nac3[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://d3phmzsgt55dz8[.]cloudfront[.]net/wr/?p=(0101)-20357-75665
  •  hxxps://qijs4lkmkrjbxzgxu2whvfa6jpvlv3svq[.]pages[.]dev/smart89/
  •  hxxps://jldiaa5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://bvgftfytfjghvgj[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://dfsz544ssdd[.]pages[.]dev/
  •  hxxps://window-security11[.]azurewebsites[.]net/
  •  hxxps://jgeb6c8queuspv[.]pages[.]dev/smart89/
  •  hxxps://imln9km5c3rrynvb[.]pages[.]dev/smart89/
  •  hxxps://nac2-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://nac2-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://luuk1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://ah6w5uz0pk[.]pages[.]dev/smart89/
  •  hxxps://minusdengi[.]pages[.]dev/wu1ydhaahua/
  •  hxxps://aqa[.]fumigaconbarrera[.]com/
  •  hxxps://g2ptmtnngopfp1nww5xyrzpocubcxby[.]pages[.]dev/smart89/
  •  hxxps://r1sdhgghgh56fyds[.]pages[.]dev/
  •  hxxps://fgchfc56r[.]pages[.]dev/
  •  hxxps://jg9akelekqgh9xg[.]pages[.]dev/smart89/
  •  hxxps://d14kcjs6l71xiw[.]cloudfront[.]net/
  •  hxxps://gvbgbgbgbgbgb-gbgbgbgbgbsxsx-jmbpo[.]ondigitalocean[.]app/
  •  hxxps://awoompp3-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://jjk22-secondary[.]z21[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://usvsvuit5ug[.]pages[.]dev/smart89/
  •  hxxps://awoomi44[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm1-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm1-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://hmmm1-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://ppqq6-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://ctrtab18-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://ctrtab15-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://ctrtab15-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://mut3-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut3-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://rtgxgf56dyffgg[.]pages[.]dev/
  •  hxxps://hmmm3-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://hmmm3-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://win-defender-sec-64chhtyuirresvx0x1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jjkki122-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://jjkki122-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jjkki122-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://dghghghdhdd67723233tyt[.]pages[.]dev/
  •  hxxps://demg2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-923-6827
  •  hxxps://microsofy-system-update[.]pages[.]dev/
  •  hxxps://wdytfdgh6734uwefgv[.]pages[.]dev/
  •  hxxps://dcnpot7kvvzte[.]pages[.]dev/smart89/
  •  hxxps://awsppli2[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://awsppli2[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://56edthdxfhbx[.]pages[.]dev/
  •  hxxps://tronknd4w[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wantedmarket[.]github[.]io/may-direct/
  •  hxxps://udi6-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://udi6-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk7-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk7-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://luuk2-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk2-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk2-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://dkfhdhflkd-cbvcvkjchvjk[.]azurewebsites[.]net/
  •  hxxps://stagingneds[.]d3hl0lrcv4ska2[.]amplifyapp[.]com/go[.]html?tk=a21lUDsiYT5czZEGyumonbWB9jIPNhMQ
  •  hxxps://tinsigolucker[.]pages[.]dev/
  •  hxxps://hfdxw46ydrfxcx[.]pages[.]dev/
  •  hxxps://sdgeatweywetgy[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://appc7v3[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://micro-service-alertc0277sb-error[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://condescending-sutherland[.]159-65-147-148[.]plesk[.]page/
  •  hxxps://wseerrokk1-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://wseerrokk1-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://dsggh34guwegf[.]pages[.]dev/
  •  hxxps://llomm0[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://llomm0[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://llomm0[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://microsoftalert[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://windows-services-update[.]pages[.]dev/
  •  hxxps://rrqwertyt32[.]s3[.]eu-north-1[.]amazonaws[.]com/loginpopfr/index[.]html
  •  hxxps://twl7nlqhdoq[.]pages[.]dev/smart89/
  •  hxxps://axscdscvfdv-fvdfvdvfdvfvfv-6xxkr[.]ondigitalocean[.]app/
  •  hxxps://suzuno[.]coinscope[.]pro/
  •  hxxps://vishal26-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://vishal26-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://qpiqp6[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-726-5043
  •  hxxps://jjk18[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jjk18[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://0xfem234qk8w[.]azureedge[.]net/
  •  hxxps://tfgcf5623f23tyfty[.]pages[.]dev/
  •  hxxps://wonddddddererejpeee32[.]z23[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://mut3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://mut3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://mut3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://uywfg344rruyywewegwegfegf[.]pages[.]dev/
  •  hxxps://udi1[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://udi1[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://dfhfg5454[.]pages[.]dev/
  •  hxxps://nac6[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://nac6[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://nac6[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://mut1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://mut1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://nac3-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://ahvcjzhbasxksback[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://nddlssszzza[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-855-399-1004
  •  hxxps://weghcw5623cghwe[.]pages[.]dev/
  •  hxxps://jjjppp6133xerus5783[.]z7[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://jldiaa12-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://jldiaa12-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://awoomi44-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://awoomi44-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://ggkhlkhlk-hhjgjgkui[.]azurewebsites[.]net/
  •  hxxps://237rtfwtgufvgdfv[.]pages[.]dev/
  •  hxxps://xxccdckdvfvfvfv[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n-1-833-519-6284
  •  hxxps://secure-app22-system[.]pages[.]dev/
  •  hxxps://236fuywefguu[.]pages[.]dev/
  •  hxxps://f0mlxe0jneh1[.]pages[.]dev/smart89/
  •  hxxps://septaospoploos[.]pages[.]dev/
  •  hxxps://nac6-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://nac6-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://ashgcghsd5623r23r67sdv[.]pages[.]dev/
  •  hxxps://fhxfg545we46[.]pages[.]dev/
  •  hxxps://djfhkjdsf-jkhoithirery[.]azurewebsites[.]net/
  •  hxxps://nac2[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://nac2[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://ytcsdgy67fguewvwe[.]pages[.]dev/
  •  hxxps://allisallwell[.]pages[.]dev/
  •  hxxps://rebelsupport[.]xyz/
  •  hxxps://mymicrojpeeeieie2[.]z11[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://jjkki124-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jjkki124-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://jjkki124-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://jjkki124-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://rfhsye56sdrfhsx[.]pages[.]dev/
  •  hxxps://bc[.]ohiodumpster[.]com/
  •  hxxps://yrdyh4srt[.]pages[.]dev/
  •  hxxps://gasvcghgh23e23[.]pages[.]dev/
  •  hxxps://mmkiiop5-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-293-0117
  •  hxxps://friendly-shortbread-55e4cf[.]netlify[.]app/c0de0fehlerh0tline0-080f80ch080-0fdde/
  •  hxxps://vqpv115[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk2[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://jjk19-secondary[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://kalomalalo[.]pages[.]dev/win/
  •  hxxps://vqpv114-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://vqpv114-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://vqpv114-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://isoallp2-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://isoallp2-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://isoallp2-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://isoallp2-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://54e4trdry56sdxrfg[.]pages[.]dev/
  •  hxxps://tnagifvebaiugbaensrhnubgurghnaeigna6gtahgng[.]azurewebsites[.]net/
  •  hxxps://asiioaa16-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://asiioaa16-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://asiioaa16-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://jjkki122[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://win-defender-sec-64chhtyuirresvx0x2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wseerrokk6[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://secure-app17-system[.]pages[.]dev/
  •  hxxps://r1sduycvjhsdjh[.]pages[.]dev/
  •  hxxps://knyreraxcw887n[.]pages[.]dev/smart89/
  •  hxxps://luuk3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk3[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://lskekeiiri9hdhhdh373ybffpdld[.]pages[.]dev/mwfmbcer[.]mp3
  •  hxxps://fgxfg544ssrtrtrs[.]pages[.]dev/
  •  hxxps://r1scsdc3fervdf[.]pages[.]dev/
  •  hxxps://microsoft-alert-system-compromiseddfcd[.]pages[.]dev/
  •  hxxps://vqpv114[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://appc7c4[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://fvhbghfbuhwefbc[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://kajju40[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://sooos5[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://asiioaa16[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://t21bln2t6bqz5[.]pages[.]dev/smart89/
  •  hxxps://dshfgiesgfkjszx[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://894trygfwhfbdjkqjnrf3-secondary[.]z14[.]web[.]core[.]windows[.]net/
  •  hxxps://jz0ffcxgkg1olcjog[.]pages[.]dev/smart89/
  •  hxxps://kaidosaaan[.]z1[.]web[.]core[.]windows[.]net/
  •  hxxps://sdgvgd3we2323[.]pages[.]dev/
  •  hxxps://gu67rt4usdvghds[.]pages[.]dev/
  •  hxxps://fgxcfg56edtydch[.]pages[.]dev/
  •  hxxps://jjkki124[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk4-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://luuk4-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://luuk8-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk8-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk8-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://j2m2wb6ewxfmxyvaufuh9n2gotk8po[.]pages[.]dev/smart89/
  •  hxxps://kmm6[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://kmm6[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://ytwefvgwe6734rgjwehv[.]pages[.]dev/
  •  hxxps://ghch54xfgxf[.]pages[.]dev/
  •  hxxps://jsrrqwerty35[.]s3[.]eu-north-1[.]amazonaws[.]com/8049webport/index[.]html
  •  hxxps://saftydt563f33[.]pages[.]dev/
  •  hxxps://hmmm1[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://twdcghd6734fgwe[.]pages[.]dev/
  •  hxxps://mut2[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://app6j2[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://awoompp3[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://awoompp3[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://ogniaeogbuaebginaoiehauebvnnveiu[.]azurewebsites[.]net/
  •  hxxps://jjk18-secondary[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://jjk18-secondary[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://tron200001[.]z13[.]web[.]core[.]windows[.]net/Wi0n021HelpErr0Asm021/index[.]html
  •  hxxps://stellular-squirrel-7dfa5d[.]netlify[.]app/
  •  hxxps://r1sdgvvhg2356ty[.]pages[.]dev/
  •  hxxps://luuk3-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://r1guysdvcjhvghsd[.]pages[.]dev/
  •  hxxps://asiioaa[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://asiioaa[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm4-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm4-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://hmmm4-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://hmmm4-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://jjjppeoutlookmen23[.]z23[.]web[.]core[.]windows[.]net/ErM0acd0SmW0Security04/index[.]html
  •  hxxps://dede11[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://4fdvf34tgfdcfd[.]pages[.]dev/
  •  hxxps://ygtfrfghj[.]pages[.]dev/serveWre0sw/
  •  hxxps://r1sdgcvsdgh342[.]pages[.]dev/
  •  hxxps://the-cartel[.]shop/W0indbnAmd07w0in820/index[.]html
  •  hxxps://secure-app18-system[.]pages[.]dev/
  •  hxxps://58fdce5b[.]flc-adg[.]pages[.]dev/
  •  hxxps://luuk4[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk4[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk4[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://keleostars[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://mm2v1hroie[.]z32[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://fdskvbsdbfvwjdfnwo[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://wemmlp8-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://wemmlp8-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://wemmlp8-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://micro-soft-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vishal26[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://vishal26[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://jepdiififofifeuu234343[.]z23[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://functionwonderf2342[.]z23[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://gtteeddxx[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-877-914-2435
  •  hxxps://nac1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://nac1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://nac1[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://awsppli4-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://awsppli4-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://win-defender-sec-64csvx0x111[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-service-alertc0277sb-error123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tdsdfsdf45we54wxdf[.]pages[.]dev/
  •  hxxps://micro-service-alert-233[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tronl8ivs4[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jldiaa5-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jldiaa5-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://sdgvgsd34cweghf[.]pages[.]dev/
  •  hxxps://windowsessentials-v2024-online[.]pages[.]dev/
  •  hxxps://dianjuddjpeeoorr234[.]z23[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://dede11-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://dede11-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://dede11-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://wefgiwegfisadoeqfo[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://kijg-anw9t[.]ondigitalocean[.]app/jsrkbb0x009Wn00786xhk9x/index[.]php
  •  hxxps://mbljormkgrnw0wnmji[.]pages[.]dev/smart89/
  •  hxxps://luuk11[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk11[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://luuk11[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk11[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://micro-service-alertc0277sb-erro[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://54rtssgfsedzd[.]pages[.]dev/
  •  hxxps://awsppli4[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://awsppli4[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://r1sdhgcvghsd2[.]pages[.]dev/
  •  hxxps://brhycawdt1jk93u[.]pages[.]dev/smart89/
  •  hxxps://awooppll3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-884-6081
  •  hxxps://awsppli2-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://bin3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-928-8859
  •  hxxps://ugssdg5634fgwevfged[.]pages[.]dev/
  •  hxxps://jjk19[.]z16[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://jjk22[.]z21[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://jjk22[.]z21[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://svsrnxfbqft9wv4l9u[.]pages[.]dev/smart89/
  •  hxxps://eyrtkwndbfvsdkgf[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://dt9ozob9zpzdh[.]cloudfront[.]net/wr/?p=(0101)-20357-75665
  •  hxxps://secure-app21-system[.]pages[.]dev/
  •  hxxps://ctrtab13[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=09-70-38-95-17
  •  hxxps://asdnbcahfvcakjsbcfkla[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://dgvgj43evfj[.]pages[.]dev/
  •  hxxps://whale-app-t2vcy[.]ondigitalocean[.]app/
  •  hxxps://micro-service-alert-233-212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdty2356ghwe[.]pages[.]dev/
  •  hxxps://micro-soft-service-failed-error-1888902260[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-app19-system[.]pages[.]dev/
  •  hxxps://udi6[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://udi6[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://rs1hgcgbvfghxcg5[.]pages[.]dev/
  •  hxxps://hgjfugkhjkj[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://nzh90ulwsg[.]pages[.]dev/smart89/
  •  hxxps://aaooli2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-528-9136
  •  hxxps://microsoft-terms-policyalr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://microsoftwindowsapplemacscams[.]netlify[.]app/scams/werrx01/?phone=%201-604-373-6777
  •  hxxps://secure-app16-system[.]pages[.]dev/
  •  hxxps://ppqq7-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm4[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://awoomi112[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://llomm0-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://bzxr1tfchwjkqxjr8ftb[.]pages[.]dev/smart89/
  •  hxxps://vqpv115-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://vqpv115-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://sefhkwggefbs[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://open-3mg[.]pages[.]dev/
  •  hxxps://luuk6[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk6[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://jhfuhbkjkjilhhjk[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://ld0fiqsqyxcb[.]pages[.]dev/smart89/
  •  hxxps://fgscfgs34fdsghc[.]pages[.]dev/
  •  hxxps://hmmm2[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://hmmm2[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm2[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://yfbvwaiofgbeiuavgiueangaerbgtyerabgybeaiu634[.]azurewebsites[.]net/
  •  hxxps://www[.]aqa[.]fumigaconbarrera[.]com/
  •  hxxps://amkiyuerbxl89s5ykhzkggyspw8igsactb[.]pages[.]dev/smart89/
  •  hxxps://ba[.]deluxecrm[.]com/
  •  hxxps://mut5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://mut5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://wseerrokk1[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://hmmm3[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://hmmm3[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://hmmm3[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://cplouty9m2[.]pages[.]dev/smart89/
  •  hxxps://oeerrdcccc[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-877-921-7361
  •  hxxps://asiioaa523[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://9b72af85[.]nexzoeames[.]pages[.]dev/decm7hvkfum5/
  •  hxxps://ctrtab15[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://ctrtab15[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://ctrtab15[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://wseerrokk6-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://wseerrokk6-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://wseerrokk6-secondary[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://sadswerg34dfvf[.]pages[.]dev/
  •  hxxps://udi3[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://udi3[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://satdxf2fgw[.]pages[.]dev/
  •  hxxps://dfgdbgdfgvdfvcsdc[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://luuk11-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://m5p7xtotzy8wry[.]pages[.]dev/smart89/
  •  hxxps://asdada85sadqfdc[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html?phone=null
  •  hxxps://secure-app20-system[.]pages[.]dev/
  •  hxxps://appgy6y2[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh042/index[.]html
  •  hxxps://nhpm1qpekdwi[.]pages[.]dev/smart89/
  •  hxxps://nac1-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://udi1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://udi1-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://mut1-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://luuk12-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk12-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://luuk12-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://jldiaa12[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://mut2-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://mut2-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://qrwhyrykirilsfertuirtlfyduiaer[.]azurewebsites[.]net/
  •  hxxps://itachisensei[.]z6[.]web[.]core[.]windows[.]net/
  •  hxxps://r1gsdcgsdv36dgvc[.]pages[.]dev/
  •  hxxps://sooos5-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://sooos5-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://sooos5-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://mubilonjgbetter[.]pages[.]dev/wu1ydhaahua/
  •  hxxps://x8qlfs2ocptor[.]pages[.]dev/smart89/
  •  hxxps://udi2-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://udi2-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://udi2-secondary[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk12[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://luuk12[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://ppqq7[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://ppqq7[.]z23[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://kuhsrdqsflefkzyq3ci[.]pages[.]dev/smart89/
  •  hxxps://luuk6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://luuk6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://kmm6-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.