2024-08-31 - Tech Support Scam - Phishing Capmapign Observation Alert

87 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 87 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://fcytghetygrf[.]pages[.]dev/
  •  hxxps://desktop-network-alert-201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://media[.]financedigitalwise[.]com/
  •  hxxps://oiunjq10-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://oiunjq10-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://a1-8st[.]pages[.]dev/
  •  hxxps://right7-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://right7-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://right7-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://sdcdcdcd6566sdds[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-856-726-2995
  •  hxxps://app32bhnj[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://bhpki2z9ok62u[.]pages[.]dev/smart89/
  •  hxxps://s3[.]ap-south-1[.]amazonaws[.]com/myujiobkt1232[.]97[.]50bhoptr5178[.]vgkr62[.]ghjj260[.]5[.]d81j[.]4[.]b2h[.]1[.]007/Wi0n00ertrf500mpAlert999/xyz08851232[.]html
  •  hxxps://fggfggg2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://fggfggg2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://gfxgfcxrtxhce4drtydr[.]pages[.]dev/adcfeWtrokgbb4s/
  •  hxxps://tydyededs5434ssa[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-810-394-3327
  •  hxxps://ca11he1lpn0wrnre112[.]pages[.]dev/fonts/media/media/js/js/main[.]js
  •  hxxps://ca11he1lpn0wrnre112[.]pages[.]dev/fonts/media/media/js/js/jquery[.]min[.]js
  •  hxxps://yfr838alapojbc[.]pages[.]dev/smart89/
  •  hxxps://f2u9dzffhv7jx[.]pages[.]dev/smart89/
  •  hxxps://nominateroom[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://app32bhn[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://fuddivirus[.]pages[.]dev/windows02882elrt/
  •  hxxps://poiio114[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://poiio114[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://right8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://right8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://ttrtryy[.]z8[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-828-407-8989
  •  hxxps://nhugst[.]s3[.]eu-north-1[.]amazonaws[.]com/index[.]html
  •  hxxps://d1[.]myspacescripts[.]com/system[.]html
  •  hxxps://jhgtttv3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://jhgtttv3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://jhgtttv3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://jp9887[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://jp9887[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://jp9887[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://jp9887[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://giddf8[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://resistneighborhood[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://ttrtryy1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://ttrtryy1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://2k9g7jgc30pk6lqrm[.]z20[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://app33jk1[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://app33jk1[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=1-844-524-5511&_event=e128f49f53252ff588824e6d8053285d
  •  hxxps://jbgugduyeguegueguegeugduguygjudhii8dhjihdihd[.]pages[.]dev/
  •  hxxps://qiuttvv5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://qiuttvv5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://vfgttgfv4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://vfgttgfv4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://order[.]opulent-jewel[.]com/
  •  hxxps://bcf4gy3kaepmu[.]pages[.]dev/smart89/
  •  hxxps://iiohtml5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://iiohtml5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://iiohtml5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://iiohtml5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://jy72pluis0u2ym9c7[.]z5[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://jurisdictionhighway[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://c28d4a82-bc4f-43b8-8c87-16d04a929795[.]s3[.]ap-northeast-2[.]amazonaws[.]com/%23@&!%23%23$&@!!%25%23$%25%5E%5E%23&$%23%23%23!!%23&$$$$!%23%5E@@!&@$%25!%25%5E$/index[.]html
  •  hxxps://s3[.]ap-southeast-1[.]amazonaws[.]com/myujiobkt4010[.]97[.]50bhoptr5178[.]vgkr62[.]ghjj260[.]5[.]d81j[.]4[.]b2h[.]1[.]007/Wi0n00ertrf500mpAlert999/xyz08854010[.]html
  •  hxxps://jp786[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://jp786[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://device-user-alert-12086[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://giddf3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://hamna4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://hamna4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://trfccrt1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://trfccrt1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://trfccrt1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://tekhub4-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://tekhub4-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://astgvvt4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://4i7ruod4qxktdavhj[.]z20[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://iiohtml5-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://iiohtml5-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://vftgdr3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/
  •  hxxps://ssxscdxc545sdxxss[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-810-268-4328
  •  hxxps://sxdscs445s3asszs[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-865-607-6502&referrer=appmetrica_tracking_id=173056386274506704&ym_tracking_id=12873603768847937915
  •  hxxps://microsoft-app-eby47[.]ondigitalocean[.]app/?phone=+1-866-960-9977
  •  hxxps://xsxdcdcd656sdsa[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-810-449-9473&referrer=appmetrica_tracking_id%3D821568421631114860%26ym_tracking_id%3D3964940356073186063
  •  hxxps://desktop-errors-1442[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://right4-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://right4-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://imiazek6hajjkp-secondary[.]z13[.]web[.]core[.]windows[.]net/?phone=09-70-18-21-63
  •  hxxps://trfccrt1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://trfccrt1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://stingray-appvcvccvcvcv-gi7j6[.]ondigitalocean[.]app/
  •  hxxps://fggfggg2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://fggfggg2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://jhgtttv6[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://jhgtttv6[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://yscfsdsdcdsms1[.]pages[.]dev/appdewWrdjh3s8q/
  •  hxxps://iiohtml1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://astgvvt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://astgvvt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://qijs4lkmkrjbxzgxu2whvfa6jpvlv3svq[.]pages[.]dev/smart89/
  •  hxxps://widetecor[.]info/
  •  hxxps://xdcdcdddcff33a[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-802-829-3448
  •  hxxps://right5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://ca11he1pn0wappm1[.]pages[.]dev/
  •  hxxps://tamil1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://wellcome1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-828-767-7608
  •  hxxps://micro-service-device-alert-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dp-lunga[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://clrdg19bj276gt0vu384qe5a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://clrdg19bj276gt0vu384qe5a[.]z13[.]web[.]core[.]windows[.]net/?msclkid=e6ca5f16b71b171d6c0f39c4af197e28
  •  hxxps://aqua-denyse-30[.]tiiny[.]site/
  •  hxxps://ttrfrr2[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://ttrfrr2[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://xjhb-4gowc[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://beginningtransaction[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://ggraxiyzqatsxtuuncg0vqwhswkzcjiyh8jeeswzqmckxqaueslan8[.]pages[.]dev/smart89/
  •  hxxps://gvbcvgfv2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-820-837-9395
  •  hxxps://gvbcvgfv2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-864-275-9124
  •  hxxps://treepp14[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://treepp14[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://microsoft-rich-secure-o2n5q[.]ondigitalocean[.]app/?phone=+1-855-491-7684
  •  hxxps://microsoft-secure-alert-network-cy9os[.]ondigitalocean[.]app/?phone=+1-855-491-7648
  •  hxxps://ncdrth0[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-828-423-3153
  •  hxxps://dontwrry3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-859-436-5000
  •  hxxps://tamil3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://tamil3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://wsrrtvvi88[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://support-call-helpline[.]online/
  •  hxxps://apple-mac-support-help[.]pages[.]dev/
  •  hxxps://hamna1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://hamna1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://grdsfter[.]s3[.]eu-north-1[.]amazonaws[.]com/index[.]html
  •  hxxps://gvbcvgfv1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-820-667-7568
  •  hxxps://bxfib148zym9paksu[.]z19[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://nationalistleaf[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://aweooiil-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://app32mmq[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/
  •  hxxps://ttrtryy1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://ttrtryy1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://hamna2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://hamna2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://vfgttgfv98[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://vfgttgfv98[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://really3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://really3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://namandas-bhdgd-com[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nddc545sdsscxs[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-856-726-2995
  •  hxxps://dcdcdcdcd656sdcdcdxs[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-866-581-6037
  •  hxxps://tekhub5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://m28ukxke9wpy5lbls[.]z20[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://tamil5-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://ytvvfrtu5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-245-784-5264
  •  hxxps://really1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://really1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://wsrrtvvi0-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://tinsigolucker[.]pages[.]dev/
  •  hxxps://qiuttvv5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://qiuttvv5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://kyjapan2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-828-407-8989
  •  hxxps://sdsddd65scdfd[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-866-581-3590
  •  hxxps://septaband[.]pages[.]dev/
  •  hxxps://right5-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://aweooiil[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://aweooiil[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://desktop-microsoft-errors-223[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jhgtttv3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://jhgtttv3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://kkxxcds555ssds[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-803-466-1056
  •  hxxps://giddf[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://giddf[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40478
  •  hxxps://choduvirus[.]pages[.]dev/windows02882elrt/
  •  hxxps://yuiokmn0-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://yuiokmn0-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://packageexplain[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://yuiokmn6[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://astgvvt4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://astgvvt4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://serviceappinfms1[.]pages[.]dev/
  •  hxxps://sdfcsdms1[.]pages[.]dev/
  •  hxxps://xtrea3[.]z31[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-864-551-7582
  •  hxxps://device-problem-1299[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ncdrth1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-864-363-3200
  •  hxxps://drp5yrq57b3umn70u[.]z4[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://oiunjq10[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://sxdcdcd656sxssz[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-803-466-1056
  •  hxxps://stephbrde[.]blob[.]core[.]windows[.]net/$web/index[.]html
  •  hxxps://giddf4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://ghsavchgdsvghdsgh[.]pages[.]dev/adcfeWtrokgbb4s/
  •  hxxps://thursday1[.]blob[.]core[.]windows[.]net/app2/index[.]html
  •  hxxps://cfve-yrc3n[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?aezp=1f28swbm0cpzkwd-789_recetasdeamorysalud[.]com-recetasdeamorysalud[.]com-12&click_id=1f28swbm0cpzkwd&clickid=0db813dd6d18b4f5928508c1ccccdeda&phone=1-860-374-9977
  •  hxxps://tekhub7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://tekhub7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://bj6sfu2dmfegvb8vp[.]z16[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://wsrrtvvi4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://wsrrtvvi4[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://schoolprobeta002[.]blob[.]core[.]windows[.]net/schoolprobeta002/index1a[.]html
  •  hxxps://micro-service-alertc0277sb-realnew[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hamna1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://right4[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://giddf6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40478
  •  hxxps://giddf6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://jobadoba[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://desktop-errors-device-1203[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://msp-micro-support-help-banking[.]pages[.]dev/windows02882elrt/
  •  hxxps://fggfggg1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://fggfggg1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://25xykvipjfe8dkesv[.]z35[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://sdd6dhshddds65sdx[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-810-394-3327&pt=Security%20center&ri=0&ru=-&re=0&vi=1&pv=1&lv=0&vw=1872&vh=930&dw=1872&dh=3975&st=0&sl=0&aip=1&tz=240&rc=1&cb=0&a=GSN-090977-V&id=ab975afb91e5db1df54a48deecaf4e9b&tv=6[.]7[.]1941
  •  hxxps://astgvvt3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://astgvvt3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://microsoft-alert-record-ul74u[.]ondigitalocean[.]app/
  •  hxxps://tekhub1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://tekhub1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40478
  •  hxxps://tekhub1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40418
  •  hxxps://zq4fsweadx1qdk[.]pages[.]dev/smart89/
  •  hxxps://treepp14-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://treepp14-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://really2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://really2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://niz6qjltkfpv3cdzk[.]z20[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://chootvirus[.]pages[.]dev/windows02882elrt/
  •  hxxps://giddf-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://poiio12[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://poiio12[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://microsoft-secure-net-2-vqnss[.]ondigitalocean[.]app/
  •  hxxps://microsoft-secure-ebefb[.]ondigitalocean[.]app/
  •  hxxps://sxsxss656sdxc[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-843-531-1452
  •  hxxps://wellcome3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-863-409-8929
  •  hxxps://retreatpasture[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://westeernpeople1[.]s3[.]eu-north-1[.]amazonaws[.]com/western/dennewblc/index[.]html
  •  hxxps://desktop-alert-new-123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wdtwreuu8[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(888)-734-7217
  •  hxxps://gfschwtiemxbgwitvsvfqgdb[.]shop/Wi0nHelpJryfndErr0t08/index[.]html
  •  hxxps://hament1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://hament1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://device-issue-3221[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://giddf8-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82876-77608
  •  hxxps://giddf8-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://wsrrtvvi3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=05152-9619-699
  •  hxxps://sdgvgsdgsdjms1[.]pages[.]dev/
  •  hxxps://desktop-problem-123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zxc111[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://zxc8899976755-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://zxc8899976755-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://zxc8899976755-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://ficet8[.]shop/pop/pop/
  •  hxxps://wsrrtvvi4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://wsrrtvvi4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://www[.]order[.]opulent-jewel[.]com/
  •  hxxps://poiio11[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://desktop-error-1233234[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://giddf2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://giddf2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://computer-hadpa-virus[.]pages[.]dev/windows02882elrt/
  •  hxxps://jp9887-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://giddf5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://giddf5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
  •  hxxps://sexsualaizezdcfommnotnr[.]z13[.]web[.]core[.]windows[.]net/scfe3odi4eosc-spocd2ewpsoxc-fepsodci4fewspc-wbshc7infoshybsgc-tWind0wso2sikxjd-sd0few2oskxjcdes-cdes3ocewsxc-dspoxc1idewsxc-f0oid3eow/index[.]html
  •  hxxps://r1sduycvjhsdjh[.]pages[.]dev/
  •  hxxps://hamna8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-846-2766
  •  hxxps://hamna8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-582-2677
  •  hxxps://whale-app-vq32n[.]ondigitalocean[.]app/
  •  hxxps://rokchhjoo48n8iifh[.]z19[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://computer-timba-virus[.]pages[.]dev/windows02882elrt/
  •  hxxps://main[.]d3dlquaoize9nc[.]amplifyapp[.]com/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
  •  hxxps://dontwrry6-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-250-3201
  •  hxxps://7p01r4iy08hjyf2ue[.]z21[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://your-device-error[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://i7insqdsup6il2bou4wqd9hh[.]z13[.]web[.]core[.]windows[.]net/Wi01nHelpErr0SjY044/index[.]html?phone=[.]&
  •  hxxps://i7insqdsup6il2bou4wqd9hh[.]z13[.]web[.]core[.]windows[.]net/Ma01cHelpErr0SjY044/index[.]html?trafsrc=7c17dacbaa9caa78aba9266eac070e9f&clkid=ci678c3215cb35de2db4d4b6ffda9104bf72809&ron
  •  hxxps://vfgttgfv4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://vfgttgfv4-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://ftrfgnhy2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://ftrfgnhy2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://microsoft-device-alert-0192[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://brazzerscm-error0x22908-alert-virus-detected[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://computer-virus-megas[.]pages[.]dev/windows02882elrt/
  •  hxxps://windows-crons[.]pages[.]dev/windows02882elrt/
  •  hxxps://zxc456778-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://zxc456778-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://scdcdc878ddsssas[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-802-829-3448
  •  hxxps://jp786-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://tamil6[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://dxsxdc5445sxzss[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-866-581-6037
  •  hxxps://voyanedor[.]z33[.]web[.]core[.]windows[.]net/?phone=09-70-18-63-18
  •  hxxps://peeqkkfrk3lriurgqlmyu2rkywuem0mahs[.]pages[.]dev/smart89/
  •  hxxps://astgvvt3[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://apple-mac-support[.]pages[.]dev/
  •  hxxps://your-device-error-1292[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://device-alert-1241[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tamil6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://tamil6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://collapserugby[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://ohmd43rlgzhzcvtu6h5[.]pages[.]dev/smart89/
  •  hxxps://comuter-online-banking[.]pages[.]dev/windows02882elrt/
  •  hxxps://dontwrry2-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-863-286-9704
  •  hxxps://edmvtyiso5dhadnhm[.]pages[.]dev/smart89/
  •  hxxps://iiohtml-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://iiohtml-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://kyjapan1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-846-3244
  •  hxxps://app33bhn[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://ncdrth[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-864-363-3200
  •  hxxps://micro-service-alertc0277sb-realerros3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wsrrtvvi88-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://device-alert-12123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://xxdepizql0bzzhqt[.]pages[.]dev/smart89/
  •  hxxps://micro-device-alert-1201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://really2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://really2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://oiunjq8-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://oiunjq8-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://device-network-alert-1241[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://iiohtml1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://homefinderfrancefr[.]pages[.]dev/
  •  hxxps://aweooiil1[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40412
  •  hxxps://giddf5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://ttrtryy2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://ttrtryy2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://g9iifqdwg3qbrpsqqvgt1ugv5cunaocwhuzbg3zfgubs2ueb1[.]pages[.]dev/smart89/
  •  hxxps://pihqfkgjgyik[.]pages[.]dev/smart89/?start=(0101)%2097349-47569
  •  hxxps://lol2222-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://lol2222-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://hament2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://hament2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://flc-adg[.]pages[.]dev/
  •  hxxps://iiohtml[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://giddf3-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://patientmanufacture[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://yuiokmn6-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://yuiokmn6-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://holiday-funtimes[.]pages[.]dev/
  •  hxxps://main[.]d8wu4ng1hinlm[.]amplifyapp[.]com/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
  •  hxxps://dcdd6556xxs[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-866-581-6037
  •  hxxps://a4zf9tnz5hl10nycs[.]pages[.]dev/smart89/
  •  hxxps://darktendency[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://putmysho[.]pages[.]dev/
  •  hxxps://irxpolrqchi[.]pages[.]dev/smart89/
  •  hxxps://d3tdyq6wf9a52jxl7[.]z4[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://jhgtttv6-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://jhgtttv6-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://zxc456778[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://micro-service-alertc0277sb-realskyp2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://trfccrt2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://trfccrt2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://right8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://right8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://spiffy-taiyaki-803892[.]netlify[.]app/
  •  hxxps://rredfredfredfr[.]s3[.]eu-south-2[.]amazonaws[.]com/loginpop/index[.]html
  •  hxxps://gountr3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-466-7834
  •  hxxps://dsuyhvh34df[.]pages[.]dev/
  •  hxxps://desktop-alert-error-2100[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://microsoft-secure-net-jsyzy[.]ondigitalocean[.]app/?phone=+1-855-491-7648
  •  hxxps://82fjqqezwhwjod-secondary[.]z13[.]web[.]core[.]windows[.]net/?phone=09-70-18-98-51
  •  hxxps://fggfggg1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://kkm3nj0mfb4jjs[.]pages[.]dev/smart89/
  •  hxxps://giddf6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://giddf6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://qwvlxcwevjpic8psemq[.]pages[.]dev/smart89/
  •  hxxps://micro-service-alertc0277sb-realsk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ppo-one[.]vercel[.]app/
  •  hxxps://teemlist1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-449-9473
  •  hxxps://computer-financial-virus-837x0xcx[.]pages[.]dev/windows02882elrt/
  •  hxxps://unh7x9ho2r6kxg3gd[.]z4[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://poiio114-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://poiio114-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://ftrfgnhy2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://restassuredsep[.]s3[.]amazonaws[.]com/restassured/index[.]html
  •  hxxps://oiunjq8[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://poetrydesigner[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://tekhub1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://tekhub1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://doiw0zuhcw9rosjhic[.]pages[.]dev/smart89/
  •  hxxps://tekhub7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://tekhub7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://micro-service-alert-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jellyshake[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://tekhub3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40465
  •  hxxps://tekhub3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40478
  •  hxxps://astgvvt[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://microsoft-new-device-error-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://giddf4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40478
  •  hxxps://xsmoux9iteosbcpy2[.]z21[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://microsoft-network-alert-zgxhx[.]ondigitalocean[.]app/?phone=+1-855-491-7644
  •  hxxps://yuiokmn0[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://yuiokmn0[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://jellyfish-sfldsfljds-dpsgh[.]ondigitalocean[.]app/?phone=+1-877-201-1580
  •  hxxps://desktop-device-erorrs-2903[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://huspe[.]s3[.]eu-north-1[.]amazonaws[.]com/index[.]html
  •  hxxps://micro-service-alertc0277sb-reln[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tmnk5ylpsojo78[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://micro-desktop-alert-0122[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nodrmaslsexgualgq[.]z13[.]web[.]core[.]windows[.]net/akz3cd7socs-ocdsco8dewsox%20dspo3cmwdsx-%20dsoxcoco5sdpsod2sdps-coeoscfd6eosdc-logicdwe-s4hubnetfu4eisjc-didew2pbgsc-socaqz2dps3xgbhn-sodwpjdc4msd/index[.]html
  •  hxxps://hamna4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://hamna4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://kotrep[.]b-cdn[.]net/jt[.]html
  •  hxxps://convulsionwhaw[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://desktop-device-alert-2323[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hament2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://hament2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://hament2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://chootiyavirus[.]pages[.]dev/windows02882elrt/
  •  hxxps://rzijs6cg2940bk7qe51zm8u[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tekhub3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://tekhub3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40421
  •  hxxps://tekhub3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40418
  •  hxxps://raornaiev[.]z35[.]web[.]core[.]windows[.]net/WinhelplineMyuVi0jp0040/index[.]html
  •  hxxps://raornaiev[.]z35[.]web[.]core[.]windows[.]net/MachelplineMyuVi0jp0040/index[.]html
  •  hxxps://support-call-helpline[.]xyz/
  •  hxxps://tamil5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://tamil5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://device-desktop-1241[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://abaus1[.]s3[.]eu-north-1[.]amazonaws[.]com/index[.]html
  •  hxxps://app33bhnz[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://tamil1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://tamil1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://eoam-qobs2[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php
  •  hxxps://zxc8899976755[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://zxc8899976755[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-46491
  •  hxxps://poiio12-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://poiio12-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://microsoft-device-errore-2213123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dsuygvdg54ghd[.]pages[.]dev/
  •  hxxps://vfgttgfv98-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://pachmarhi-219957350256[.]us-east1[.]run[.]app/
  •  hxxps://micro-service-alertc0277sb-master[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ttrtryy2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://gsdgdw52332r23[.]pages[.]dev/
  •  hxxps://qiuttvv4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://qiuttvv4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://transmissionfeature[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://sds54ssbhhsgddfsza[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-856-726-2995
  •  hxxps://right7[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://right7[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://zxc111-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-82083-78693
  •  hxxps://wsrrtvvi0[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://wsrrtvvi0[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://seal-appsaacss-mip4q[.]ondigitalocean[.]app/
  •  hxxps://sdiuhggg10[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=null
  •  hxxps://hament1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://hament1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://ttrtryy8[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-820-837-9395
  •  hxxps://7s37u2c47xf9q86qo[.]z22[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://micro-service-alertc0277sb-realerros2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nswu-weyq6[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://poiio11-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://nuberlatest[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://tfdfefdse-virus-alert-9754x360xsw[.]pages[.]dev/AnDrCdEr00d0CH808Err0r8An00Dr01/
  •  hxxps://hamna2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://hamna2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://hamna2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://qiuttvv4-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://qiuttvv4-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://device-errors-223[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kyjapan1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-268-8945
  •  hxxps://dfadf2433dfsdfsdfsd[.]z23[.]web[.]core[.]windows[.]net/ErW0ind0SmW0Security04/index[.]html
  •  hxxps://really3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://really3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://amason[.]life/mcrosoft-services-virus-alert0x12-new[.]pages[.]dev/Wi0n0erAry0mpAlert048/index[.]html
  •  hxxps://sdsdttyiki877ed[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-810-449-9473
  •  hxxps://really1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://ttrfrr2-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://ttrfrr2-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40422
  •  hxxps://ttrfrr2-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://trfccrt2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-61286
  •  hxxps://trfccrt2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83384-62150
  •  hxxps://trfccrt2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40304
  •  hxxps://kgf[.]z13[.]web[.]core[.]windows[.]net/W0in0sNw0Shu1Er887/index[.]html
  •  hxxps://trq21files6468h65fdtr65g67h85deploy869[.]pages[.]dev/
  •  hxxps://charismaticrelax[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://newdcdcfcvf545[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-866-581-6037
  •  hxxps://landhvirus[.]pages[.]dev/windows02882elrt/
  •  hxxps://app32hbn[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://yerishtakyakehlatahaiji[.]pages[.]dev/
  •  hxxps://computer-virus-78765vcc[.]pages[.]dev/windows02882elrt/
  •  hxxps://app34mmonline[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=1-866-960-4564&device=c&location=9017519&tid=1308674064077123518&url=hxxps://www[.]amazon[.]com/stores/Ailun/page/52AA3AC5-42CD-4237-BE3F-75EE5051346D&gclid=EAIaIQobChMIzO2ypaKaiAMVDQKtBh3MzCtwEAAYASAAEgJLSvD_BwE&gclsrc=aw[.]ds

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.