2024-09-30 - Tech Support Scam - Phishing Capmapign Observation Alert

70 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 70 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://dawsewaa-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://24th5k1w7j3b33762[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://tmkcbkl5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://tmkcbkl5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://easyk16[.]sg-host[.]com/US/no[.]html
  •  hxxps://lively-mushroom-0668f7b10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://festqwqw[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://festqwqw[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://lyricy[.]site/windowssoftware25/contentcreator/bella[.]php
  •  hxxps://rewrwerwwewqwqeq-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://s3[.]eu-west-3[.]amazonaws[.]com/67a[.]gsf3uvfm[.]web[.]core[.]windows-0x366x6661/microsofhelp/index[.]html?gad_source=5&gclid=EAIaIQobChMIkur-2tPaiAMVllYPAh3cnA2mEAEYASAAEgLFlfD_BwE
  •  hxxps://dess2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://adolphusisomlycyou[.]pages[.]dev/A3EMmRpx/
  •  hxxps://tmkcbkl5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://zl0l9p7rgczptqikacgd[.]pages[.]dev/smart89/
  •  hxxps://igpp8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://igpp8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://igpp8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://igpp8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://fixxed7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://supposedlydependsvaleusg[.]z13[.]web[.]core[.]windows[.]net/wnask6dfdsc-fdpsodi2dew6psocd-edew3psold-c0f5dewpsod8idewsc-dazsehn3wposdkj-uew4oskjcfe6iwsxc-dsoidew2oskd5scf-ewpso4dcfewaz/index[.]html
  •  hxxps://beeferd4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://beeferd4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://beeferd4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://ipupupp[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ipupupp[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://rewrwerwwewqwqeq[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://marcelinavedachacyou[.]pages[.]dev/N2zyZQZU/
  •  hxxps://precouplecheatings[.]online/002/index[.]html
  •  hxxps://konsei[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://delightful-forest-029ca3010[.]5[.]azurestaticapps[.]net/Mac08ShDMeEr0887/index[.]html
  •  hxxps://mkctbkl5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://mkctbkl5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://yeswemetandmetandmet[.]pages[.]dev/
  •  hxxps://einstine[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tmkcbkl6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://tmkcbkl6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://gametesareproduced[.]z13[.]web[.]core[.]windows[.]net/jxci4dcdpo2sdewo8sixc-scqazc2deosic-wspo3icwoskjdsdw5ps-odxc3dewoskx5jcdisxc-dspoic2ewoskjx5cdsdc-wposic2deosic-c0dew4osk/index[.]html
  •  hxxps://dytchpncomvhy8lgztxcl-6r3kw[.]ondigitalocean[.]app/mscenter/indexffb0[.]php
  •  hxxps://otkaoleaafiibnbs[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://uuiuiuiuiu[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://uuiuiuiuiu[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://upi5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://upi5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://ioioioioi[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ioioioioi[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://jp3datacatalyst2[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-855-491-5350
  •  hxxps://jp3datacatalyst2[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-814-791-9194
  •  hxxps://taskforyou00ready062[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://uiuiuiu-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=07522-9989-781
  •  hxxps://igpp8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://igpp8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://24th5k1w7j3b33761[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://igp8[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://igp8[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hbfpb9xvxgim0owuxky[.]pages[.]dev/smart89/
  •  hxxps://sddfsfsdsdf-fssfs-ot276[.]ondigitalocean[.]app/xxxvudsasddsder/WinhelplineASi0En020/index[.]html
  •  hxxps://carryingwebsdividing[.]z13[.]web[.]core[.]windows[.]net/xjazqc5dcdp-eowp3sodsc5ewpsoc-wpsoigb2dowswszamfr-prtcfe2psociew4psoxkcs-feps2odci4eows-dodie2wos-xhncfe4pazqso-0fewos3kzq/index[.]html
  •  hxxps://igp3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://wisoky-1wh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tentosmwntos[.]pages[.]dev/?user-agent=mozilla/5[.]0%20(windows%20nt%2010[.]0;%20win64;%20x64)%20applewebkit/537[.]36%20
  •  hxxps://24sep18ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ocifebkzoalts[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://leadstovariousforms[.]z13[.]web[.]core[.]windows[.]net/Ujheo3sdic5frexc-frews2okxcjud5eksx-0cofres2lkcjfdes-e3wpsol4kcjfir-frepodi6ewosk-vfrepdk3cfreow6lsvf-peodfd3ewlascf-dpofep6wld/004/index[.]html
  •  hxxps://newhair[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://germe3[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://differentiatexswindivid[.]z13[.]web[.]core[.]windows[.]net/Ujheo3sdic5frexc-frews2okxcjud5eksx-0cofres2lkcjfdes-e3wpsol4kcjfir-frepodi6ewosk-vfrepdk3cfreow6lsvf-peodfd3ewlascf-dpofep6wld/004/index[.]html
  •  hxxps://todr2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://todr2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://driving6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://driving6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://henstrat[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://question-bde[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://itsdone212-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://itsdone212-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mkctbkl7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://mkctbkl7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://ftiaoblkceozs[.]z19[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://zealous-grass-011487f1e[.]5[.]azurestaticapps[.]net/?bezp=554773&clickid=02410dc9300ec9167b313bd7a82b534f&phone=1-860-595-5032
  •  hxxps://mastertech[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://measuresatoalleviate[.]z13[.]web[.]core[.]windows[.]net/psoif4ewsc-depodf2eo5wskd-fr3podieo2wsd-ewpsodie4wqazcvf-dew3ksjceis6kxcjs-cv0fesocie2osxc-0cfewpso4xki6cdec-dedc2fewsza/index[.]html
  •  hxxps://inf0egtebwqms11a[.]pages[.]dev/
  •  hxxps://30th1s6d2x8g56013[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://igp8-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://eddd7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-940-8912
  •  hxxps://1d807473[.]flca[.]pages[.]dev/
  •  hxxps://system-pros-invetia[.]pages[.]dev/windows02882elrt/
  •  hxxps://ashy-hill-037dfd210[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://ashy-hill-037dfd210[.]5[.]azurestaticapps[.]net/Mac08ShDMeEr0887/index[.]html
  •  hxxps://dess1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://dess1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://fixxed8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://todr3-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://upi7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://upi7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://upi7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://micro-service-alertc0277sb-errors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://upi5-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://upi5-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://lohretsh[.]d3dobuvja3w4mw[.]amplifyapp[.]com/no[.]html
  •  hxxps://program-3ot[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://s34b5jv89wl72rxhb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yuktimukti[.]pages[.]dev/
  •  hxxps://germe6[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://silverhorizons[.]buzz/
  •  hxxps://hopeosadowmn[.]pages[.]dev/THl9V2De/
  •  hxxps://ioipoiopu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ioipoiopu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://ioipoiopu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://hosting-8z3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://beeferd2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://beeferd2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://beeferd2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://beeferd2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://kldjkljlkj[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://yuiwqhfghw[.]pages[.]dev/Ys716OUx/
  •  hxxps://johncena-b7n[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dogjon[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fix21212opippo[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://googlecen[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://njnjnj[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://njnjnj[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://resultingsecnarticle[.]z13[.]web[.]core[.]windows[.]net/Wjdh3eowsk5idj-eoskf0c9fes2okdjfisc-dcof9esokci3fesd-pocfosk4dic-d0feo2skif5ddps2ocfeos-dagho3azqwscd-cdgbe3sodsd-p3sodisd3sdepsod/index[.]html
  •  hxxps://ochenposia345na[.]pages[.]dev/wu1ydhaahua/
  •  hxxps://predominantlystatistical[.]z13[.]web[.]core[.]windows[.]net/Ndeiw3sdfewosi5dsc0frew-spco6de0sps-s0cdew2osds-dewsp4dewp7sods-depsode2sgbnhd-spdo3dewpso5desd-sddep2sokd-sd0fre5wpscdewpsod/004/index[.]html
  •  hxxps://computer-hhgsgs-block[.]pages[.]dev/windows02882elrt/
  •  hxxps://mkctbkl7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://mkctbkl7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://capt3[.]pages[.]dev/
  •  hxxps://upi7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://upi7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://ah6w5uz0pk[.]pages[.]dev/smart89/
  •  hxxps://salmon-moss-0a5830f10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://ewewephonessada[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ewewephonessada[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ewewephonessada[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://pactic2[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://ffdt1[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://microstagereducedinfo[.]z13[.]web[.]core[.]windows[.]net/mnd3hwosdc5ki-jfwo3sd-epdoi2fw6psodkc-sdpocp4soc-dpc2opslkcsc-poe4wpskdcsd-c0wpsd2oiwsd-cewosk3dcdp5sokdidsd-pwps4dodp/index[.]html
  •  hxxps://ffdt4[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://beeferd5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://beeferd5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://tronlk4sv5[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yours-1is[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://2204four[.]pages[.]dev/
  •  hxxps://tmkcbkl7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://25sep05ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nr1yaxp29ukpyuhb0zyt0ujxahjlwn[.]pages[.]dev/smart89/
  •  hxxps://tonny-9nk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://donjegat[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://microappearsextendeswteb[.]z13[.]web[.]core[.]windows[.]net/skjaq4cvbgtdies-c0ewps2oiceosd-f0e4oksj6dcides-cswde2wosie-wdcv2siazq-wdre3wksjdhfew6ksj7hcdsc-0eow2ijsd5ewosc-deoici2dewscdew/index[.]html
  •  hxxps://mnnu212jlhiuu-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://mnnu212jlhiuu-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://ggth4[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://hentaaaipro[.]pages[.]dev/
  •  hxxps://s3[.]eu-west-1[.]amazonaws[.]com/55a[.]gsf3uvfm[.]web[.]core[.]windows-0x366x6661/microsofhelp/index[.]html?gad_source=5&gclid=EAIaIQobChMI9PiK-87aiAMVNkgPAh3Yeiz3EAEYASAAEgLQ7_D_BwE
  •  hxxps://processesmeioticswxrn[.]z13[.]web[.]core[.]windows[.]net/Yshde3woskjf5eoskcd-sd0f9rewos3kc5jdiescd-esif2ewpsods-c0fdespo4ce7owskc-dpdocf3ewpos-fepso2dcivfosc-fdo4fdeosd-s0dewp2sod/index[.]html
  •  hxxps://goat-8wt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://easyk21[.]sg-host[.]com/US/no[.]html
  •  hxxps://approximatelysafetugyh[.]z13[.]web[.]core[.]windows[.]net/Ndeiw3sdfewosi5dsc0frew-spco6de0sps-s0cdew2osds-dewsp4dewp7sods-depsode2sgbnhd-spdo3dewpso5desd-sddep2sokd-sd0fre5wpscdewpsod/004/index[.]html
  •  hxxps://driving2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-488-9263
  •  hxxps://newtown-64t[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bhavn31[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html
  •  hxxps://24th2p8f6m1y04392[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ambitious-beach-0efa96910[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://evolvedgeneticdominant[.]z13[.]web[.]core[.]windows[.]net/Wjdh3eowsk5idj-eoskf0c9fes2okdjfisc-dcof9esokci3fesd-pocfosk4dic-d0feo2skif5ddps2ocfeos-dagho3azqwscd-cdgbe3sodsd-p3sodisd3sdepsod/index[.]html
  •  hxxps://germe5[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://tessta[.]pages[.]dev/Wi0n0ALxerrinf0x0876/
  •  hxxps://itsdone212[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://itsdone212[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://green-beach-08e0cba10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://computer-lock-0xer-virus[.]pages[.]dev/windows02882elrt/
  •  hxxps://nhhi3[.]pages[.]dev/
  •  hxxps://eddd5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-843-425-8515
  •  hxxps://beeferd7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://beeferd7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://niuumical[.]z1[.]web[.]core[.]windows[.]net/?phone=09-70-38-15-88
  •  hxxps://sdcsdgh5623ms[.]pages[.]dev/
  •  hxxps://johsnson[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rockstar-2t3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://getismxowa[.]pages[.]dev/F5ty2kSv/
  •  hxxps://dess4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ashy-pebble-0a5f7c710[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://fox-secure[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://careiosior[.]pages[.]dev/cD8QNIG6/
  •  hxxps://ioioioioi-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://ioioioioi-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://honestworking-envoirnment[.]site/
  •  hxxps://gfvc-ko2ra[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-805-309-0190
  •  hxxps://konhe[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://novcab2121[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://novcab2121[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://dadasasdasa-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://dadasasdasa-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://dadasasdasa-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://driving6[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://sfioaobzkctle[.]z5[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://meta-block-pc-886x[.]pages[.]dev/windows02882elrt/
  •  hxxps://festqwqw-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://festqwqw-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://doctor-ag7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://24th5k1w7j3b33764[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://oklacbifstezo[.]z1[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://fixxed8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://fixxed8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://nice-glacier-0ff3bc310[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://djsksheiuejwqiudsdsiegqdhsadiadisudg[.]s3[.]eu-central-003[.]backblazeb2[.]com/index[.]html
  •  hxxps://dependentsxdetermination[.]z13[.]web[.]core[.]windows[.]net/psmkicd1podi3fewosc-fdpodif2dewosc-dofdew4oascv-0fdewos5didosc-fazqd2ifewosd3fdwsod-sdhe3wisj5diwksjd-spdcovf3depso5cbgtvd-spoie3woascd5pocew/004/index[.]html
  •  hxxps://fixxed6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://fixxed6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://27sep05mm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://virus-virus-virus-virus[.]pages[.]dev/windows02882elrt/
  •  hxxps://todr2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://saocfileotbzk[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://jaibalajiki[.]pages[.]dev/
  •  hxxps://r5nmmyilszflcpfia0z7fosalruuhpvhvnfzvncepxuzojld8yw9u[.]pages[.]dev/smart89/
  •  hxxps://moussaa121mmnn-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://squid-app-lr64v[.]ondigitalocean[.]app/
  •  hxxps://testpopup[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ru3ia9sx[.]pages[.]dev/8O1FoQth/
  •  hxxps://microsoft-105465[.]weeblysite[.]com/
  •  hxxps://favorvalesoutcrossing[.]z13[.]web[.]core[.]windows[.]net/Yshde3woskjf5eoskcd-sd0f9rewos3kc5jdiescd-esif2ewpsods-c0fdespo4ce7owskc-dpdocf3ewpos-fepso2dcivfosc-fdo4fdeosd-s0dewp2sod/index[.]html
  •  hxxps://dsfgsd-asdfcds-9kcac[.]ondigitalocean[.]app/xxxvudsasddsder/WinhelplineASi0En020/index[.]html
  •  hxxps://festqwqwyuyiu-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://festqwqwyuyiu-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://festqwqwyuyiu-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://festqwqwyuyiu-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://iuiouuou[.]z19[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(0101)-88868-26194
  •  hxxps://iuiouuou[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26194
  •  hxxps://y5urje718a[.]pages[.]dev/TC1P44Qg/
  •  hxxps://jabwemetitwasgrrat[.]pages[.]dev/
  •  hxxps://textt2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://hen-ae6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://f0mlxe0jneh1[.]pages[.]dev/smart89/
  •  hxxps://543wew1[.]pages[.]dev/QHL2UR0b/
  •  hxxps://regardingnewsecured[.]z13[.]web[.]core[.]windows[.]net/ewndvy2oksdc-f0eosdci4fesc-cdewos2wsakjc-cdew4psod-sdegbw2ospgvnht-idjde3wisjdeiws5jscfe-0sodi3freosc0fre5wosjcd-cde4idaz/004/index[.]html
  •  hxxps://mkctbkl6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mkctbkl6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://uiuoiuoioyoi-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://uiuoiuoioyoi-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://salling1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=00-33-9-7018-5366
  •  hxxps://jessica-e9a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://water312iuoiuiou[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://water312iuoiuiou[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://kbstzeaociofl[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://discriminationrecials[.]z13[.]web[.]core[.]windows[.]net/Uhdy3wisidu5eiws0cd-c0de0soi2cufeis-xc0few4oskjcd-cd0ewsoxk3cjdes-0dpod5ifeoss-0cifr2eoskjd-d0epsok4xjcdes-0dpsoide2owls/004/index[.]html
  •  hxxps://caitlyntiarajacyou[.]pages[.]dev/BnK7I9mz/
  •  hxxps://fix21212opippo-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://fix21212opippo-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://gijusot1s[.]pages[.]dev/wnUh3vrL/
  •  hxxps://rsa-605[.]pages[.]dev/
  •  hxxps://igpp15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://igpp15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://mnnu212-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://24th5k1w7j3b33763[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://summarywebshprocesses[.]z13[.]web[.]core[.]windows[.]net/ewndvy2oksdc-f0eosdci4fesc-cdewos2wsakjc-cdew4psod-sdegbw2ospgvnht-idjde3wisjdeiws5jscfe-0sodi3freosc0fre5wosjcd-cde4idaz/004/index[.]html
  •  hxxps://tedszdg54wsrtgzgt[.]pages[.]dev/
  •  hxxps://norarebekaqicyou[.]pages[.]dev/A3EMmRpx/
  •  hxxps://rrred1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://rrred1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://test5fundingsourceauthority27sep24t2250[.]s3[.]amazonaws[.]com/25sep/0974n/Win08ShDMeEr0887/index[.]html
  •  hxxps://todr3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://todr3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://garthalexanderwacyou[.]pages[.]dev/RGVM7hZ4/
  •  hxxps://exxam5454-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://exxam5454-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://sexoinfosminorities[.]z13[.]web[.]core[.]windows[.]net/Ujheo3sdic5frexc-frews2okxcjud5eksx-0cofres2lkcjfdes-e3wpsol4kcjfir-frepodi6ewosk-vfrepdk3cfreow6lsvf-peodfd3ewlascf-dpofep6wld/001/index[.]html
  •  hxxps://26th6k1w9j3b62683[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eg2duiczqgnstsk[.]pages[.]dev/smart89/
  •  hxxps://knyreraxcw887n[.]pages[.]dev/smart89/
  •  hxxps://precisionclaim[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://textt1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://tionmaoouu[.]z1[.]web[.]core[.]windows[.]net/?phone=09-70-18-77-90
  •  hxxps://textt1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://textt1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://germ2509[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://26th6k1w9j3b62682[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://kbsialzfctooe[.]z19[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://tmkcbkl8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://26th4s7d2x5g56011[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://define7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/
  •  hxxps://oiuoiuu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://oiuoiuu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://oiuoiuu-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://moussaa121ouuuo-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://moussaa121ouuuo-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://nnmmjhgyttz56szsd[.]blob[.]core[.]windows[.]net/$web/index[.]html?ph0n=1-888-682-6852&referrer=appmetrica_tracking_id%3D317209158971556136%26ym_tracking_id%3D7161045970017433334
  •  hxxps://26sep13ww[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://germe1[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://maintainedadaptive[.]z13[.]web[.]core[.]windows[.]net/skjaq4cvbgtdies-c0ewps2oiceosd-f0e4oksj6dcides-cswde2wosie-wdcv2siazq-wdre3wksjdhfew6ksj7hcdsc-0eow2ijsd5ewosc-deoici2dewscdew/index[.]html
  •  hxxps://ufvskbzrquea[.]pages[.]dev/smart89/
  •  hxxps://torning[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://aazous2[.]z31[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-843-425-8515
  •  hxxps://water312iuoiuiou-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://water312iuoiuiou-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://vbc5ectfugjuf6e[.]pages[.]dev/
  •  hxxps://heyhappyface[.]pages[.]dev/
  •  hxxps://presesoioudjdi[.]z1[.]web[.]core[.]windows[.]net/?gad_source=5&gclid=EAIaIQobChMIpIjxz77biAMV3h1VCB33jwTfEAEYASAAEgLAc_D_BwE
  •  hxxps://ggth6[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://gleaming-trifle-dea059[.]netlify[.]app/
  •  hxxps://win9u98ue8ygr78f8b[.]pages[.]dev/
  •  hxxps://happ6[.]z24[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-865-244-8728
  •  hxxps://microsoft-ai-report[.]pages[.]dev/windows02882elrt/
  •  hxxps://nice-dune-0c040a210[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://jphdtvshow[.]online/wmjddewsidfeiwsk-sdc0vfespofe0woscdspodidewosc-f0ewoskjciewx-c0fdewpsocidesxc-deosdeowsxc-doewposx-deposdwos-c0fewpsoxcidesx-cf0dewskxjcdue-ixc0fde0wpos-0dewpaosxd-ewposid-0dewpaos/index[.]html
  •  hxxps://masteras[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://24th7r3n9c5x08063[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eddd8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-828-423-8718
  •  hxxps://exxam5454[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://cantocntrals[.]s3[.]ap-northeast-1[.]amazonaws[.]com/frewscfugtfgnmbasket[.]s3[.]ap-southeast-2[.]amazonaws[.]com/index[.]html?PubID=789&SubID=mobillegends[.]net&Camp=767&Browser=edge
  •  hxxps://sdsgsdgbsbns[.]pages[.]dev/
  •  hxxps://henry-65a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://upi6[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://hgfd-mabne[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-467-8554
  •  hxxps://involvingsystemsdurable[.]z13[.]web[.]core[.]windows[.]net/xjazqc5dcdp-eowp3sodsc5ewpsoc-wpsoigb2dowswszamfr-prtcfe2psociew4psoxkcs-feps2odci4eows-dodie2wos-xhncfe4pazqso-0fewos3kzq/index[.]html
  •  hxxps://oppositesexcouples[.]z13[.]web[.]core[.]windows[.]net/dfefnvngt9wosxcd-e0dofde0psokcfe-sd0fre0socifde-sd0fdew0psosdiur3wiesdnfh-dfjhewi3scj5fdeosdfde-sd09fe0wpsocifdescf0-deposimsc/iecx/index[.]html
  •  hxxps://26sep09mm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adrianmadelynntacyou[.]pages[.]dev/RjRbeqHN/
  •  hxxps://generallysexosarticleonf[.]z13[.]web[.]core[.]windows[.]net/Kere3wksjdhfew6ksj7hcdsc-0eow2ijsd5ewosc-0deoici2dews-cd0ewskj4cdies-c0ewps2oiceosd-f0e4oksj6dcides-cswde2wosie-wdcv2siazqwd/index[.]html
  •  hxxps://igp6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://fpgg1[.]pages[.]dev/robots[.]txt
  •  hxxps://ffdt3[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://ggth1[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://www[.]spicesurvey[.]xyz/
  •  hxxps://menu212lklkkllkk[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://menu212lklkkllkk[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://menu212lklkkllkk-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://ca11he1pn0wms112[.]pages[.]dev/
  •  hxxps://dnsupdate[.]pages[.]dev/dsuygvdg54ghd[.]pages[.]dev/
  •  hxxps://fixxed7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://fixxed7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://ai-alert-s42d[.]pages[.]dev/
  •  hxxps://takeing3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-293-0398
  •  hxxps://mnnu212[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://mnnu212[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://beeferd7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://beeferd7[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://foxcens[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://25th9k5w2j7d33762[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://walcome3-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://festqwqwmmmmnnm-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://festqwqwmmmmnnm-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://24th9s4v2d6g76333[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://embryosduringp0rnsvalue[.]z13[.]web[.]core[.]windows[.]net/khdew3oskcjdeo5wscd-0frewps3oceos-dc0fewsk4cjfiew6scc-frepsoi3des-doifew2os7kidesc-doie3owskc-depsoc5oewsc-deosck3ede7wpsod/004/index[.]html
  •  hxxps://trick00newmainlink072[.]z7[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://moussaa121ouuuo[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://capt2[.]pages[.]dev/
  •  hxxps://11qiso[.]pages[.]dev/EKwJ3F92/
  •  hxxps://hqcg9462vu7dt801sj5lbzw[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uiuoiuoioyoi[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://uiuoiuoioyoi[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://beeferd4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://beeferd4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://beeferd4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://tantramantrapantra[.]pages[.]dev/
  •  hxxps://26th4s7d2x5g56012[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://sixhdesigns[.]com/3681/1/C0deJdfd008f00d8fd0ECH888Error8Abhh01/index[.]html?
  •  hxxps://easyk18[.]sg-host[.]com/US/no[.]html
  •  hxxps://honest-kon[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jonhas[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dominantcertainservices[.]z13[.]web[.]core[.]windows[.]net/psmkicd1podi3fewosc-fdpodif2dewosc-dofdew4oascv-0fdewos5didosc-fazqd2ifewosd3fdwsod-sdhe3wisj5diwksjd-spdcovf3depso5cbgtvd-spoie3woascd5pocew/004/index[.]html
  •  hxxps://njnjnj-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://thisseasonsomeofthebest-pilotbatchiscomingto-lifenadtherearehar[.]sgp1[.]cdn[.]digitaloceanspaces[.]com/Nulldeu/index[.]html
  •  hxxps://walcome3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://walcome3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://walcome3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://igp5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://igp5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://igp5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://supportedlifespancourses[.]z13[.]web[.]core[.]windows[.]net/Tsdhe3wisj5diwksjd-spdcovf3depso5cbgtvd-spoie3woasc-dpocewp2smkiocv-fdpodi3fewosc-fdpodif2dewosc-dofdew4oascv-0fdewos5didosc-fazqd2ifewosd3fdwsod/003/index[.]html
  •  hxxps://ipupupp-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ipupupp-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://igp6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://igp6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://phonessada-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26261
  •  hxxps://phonessada-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://todr4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://todr4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://tmkcbkl8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://tmkcbkl8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://thesexchivcheaters[.]online/iecx/index[.]html
  •  hxxps://29th1k9w2j7b62682[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ippoipoip[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://sdasdsaas-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://sdasdsaas-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://moussaa121[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://carolinametatucyou[.]pages[.]dev/ZeojuvkX/
  •  hxxps://einarrhodabocyou[.]pages[.]dev/XpCIQRm3/
  •  hxxps://upi6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://upi6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://alsneiia3[.]pages[.]dev/wGSTqKOP/
  •  hxxps://ffdt5[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://dess2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://yourset[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dinstar[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://24th9s4v2d6g76334[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mnnu212jlhiuu[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://veexx4[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=07522-9989-781
  •  hxxps://sdasdsaas[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://sdasdsaas[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://eraning[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fromatmosph[.]pages[.]dev/2WWa4Zij/
  •  hxxps://xsxsjjnnn656zssd[.]blob[.]core[.]windows[.]net/$web/index[.]html?
  •  hxxps://uit74[.]z1[.]web[.]core[.]windows[.]net/IoS1n33nssf1323/index[.]html?kdph=1800-560-841
  •  hxxps://tore-6dn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rrred4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://tnhzs7163zm9lq208vu5ajyp[.]z13[.]web[.]core[.]windows[.]net/?msclkid=88b553c9646d1eba1e91353f947afab9
  •  hxxps://won-137[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://addmycart[.]online/?p=2
  •  hxxps://dominantallgroupsrndmd[.]z13[.]web[.]core[.]windows[.]net/Wdewi3skdjfe5iwk-sdfd0f3ewpsod5fieows-dpohm3feosd-fdspdo3cid6spdlkc-doife3sodkvfd-fdepsd5ofiew2oskd-0fdpocd5osdfds-ncazpvnh6shwajshc/iecx/index[.]html
  •  hxxps://beeferd5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://beeferd5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://beeferd5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://igp5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://beeferd2-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://taskforyou00ready029[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://dess4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://easyk24[.]sg-host[.]com/late/usa/index[.]html
  •  hxxps://secure-app21-system[.]pages[.]dev/
  •  hxxps://alessandroarlenehecyou[.]pages[.]dev/IqTdMbOW/
  •  hxxps://testingpurpose123[.]pages[.]dev/
  •  hxxps://terry-b2y[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://57xsjaiiw[.]pages[.]dev/PvkXRNHy/
  •  hxxps://ewewephonessada-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ewewephonessada-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://dcdcd36[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html
  •  hxxps://dess1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://diploidp0rnosatges[.]z13[.]web[.]core[.]windows[.]net/Yshe3wisjcdw5oaskc-sd0frewp2oskci4dewsc-fespdc2ovfeps-spco2psxcdoscds4pdofe-spc-ews0dofe2wsl5cfesd-fewsp5cofes-epsdocf3reps6dcpd/index[.]html
  •  hxxps://germe2[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://computer-virus-alert-porn[.]pages[.]dev/windows02882elrt/
  •  hxxps://mkctbkl5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://mkctbkl5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://nhhi2[.]pages[.]dev/
  •  hxxps://gonewams[.]pages[.]dev/nAUmYdut/
  •  hxxps://partiallyp0nsatributable[.]z13[.]web[.]core[.]windows[.]net/Wjdh3eowsk5idj-eoskf0c9fes2okdjfisc-dcof9esokci3fesd-pocfosk4dic-d0feo2skif5ddps2ocfeos-dagho3azqwscd-cdgbe3sodsd-p3sodisd3sdepsod/index[.]html
  •  hxxps://wolf-oa3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jkasd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://phonessadawqwwwq-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://phonessadawqwwwq-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://torisuco391fd[.]pages[.]dev/jTomvne7/
  •  hxxps://bernardojalonzecyou[.]pages[.]dev/OYrrqUrx/
  •  hxxps://mkctbkl6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://define7[.]z24[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-828-579-5965
  •  hxxps://ggth5[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://ffdt2[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://rrred3-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://rrred3-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://moussaa121mmnn[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://moussaa121mmnn[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://microsoft-computer-block[.]pages[.]dev/windows02882elrt/
  •  hxxps://roger-jbf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://capt1[.]pages[.]dev/
  •  hxxps://fpgg2[.]pages[.]dev/
  •  hxxps://walcome2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://walcome2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42043
  •  hxxps://textt2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://settings-bd1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://todr4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://kamall31[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://rlqe2738vu46gt5zm19njyw[.]z13[.]web[.]core[.]windows[.]net/?msclkid=4d65ad9ae04313c7d5ffcb6ed9015b82
  •  hxxps://gamtrack[.]link/Wi0n0erAry0mpAlert048/index[.]html
  •  hxxps://project-may10[.]pages[.]dev/
  •  hxxps://takeing6-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-829-9044
  •  hxxps://igpp15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://igpp15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://igpp15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://bzxr1tfchwjkqxjr8ftb[.]pages[.]dev/smart89/
  •  hxxps://uuiuiuiuiu-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ioipoipoio-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-36233
  •  hxxps://ioipoipoio-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://staging[.]d2a084yezb7e71[.]amplifyapp[.]com/no[.]html
  •  hxxps://sedrf1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-859-693-0951
  •  hxxps://pactic1[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://gametescombinetoform[.]z13[.]web[.]core[.]windows[.]net/oscds4pdofe-spc-ews0dofe2wsl5cfesd-fewsp5cofes-epsdocf3reps6dcpd-he3wisjcdw5oaskc-sd0frewp2oskci4dewsc-fespdc2ovfeps-spco2psxcd/index[.]html
  •  hxxps://kamamm31[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=1-828-620-9575&url=hxxps%3A%2F%2Fwww[.]amazon[.]com%2F&%243p=a_google_adwords&gclid=EAIaIQobChMIsKmMoY7eiAMVqw2tBh0xzAcKEAAYASAAEgKYNPD_BwE&_branch_match_id=1357423170817089030&utm_medium=marketing&_branch_referrer=H4sIAAAAAAAAAxXKzQqCQBRA4afRpYb2A4HE1SYQUYogsI2MOs0MjV67GhMuevYMzurjqGkaxr3vq4kkeXwYPKP7p99u2D0pacuL%2BvAmE6n%2F5oTgBKcla63HOz5j7zXYLeA6wTocIl5JRGlExVuL1I6ubIxuIwYpTy9YJypPx6zLsdwJDfntZYMpVqvPDE3GAEq4AjCZlcX5WMWWuV8SD0Gke1nVhHYUFCWKsBM%2F2FU1wLUAAAA%3D
  •  hxxps://molecularrecognitionsys[.]z13[.]web[.]core[.]windows[.]net/jxci4dcdpo2sdewo8sixc-scqazc2deosic-wspo3icwoskjdsdw5ps-odxc3dewoskx5jcdisxc-dspoic2ewoskjx5cdsdc-wposic2deosic-c0dew4osk/index[.]html
  •  hxxps://nhhi1[.]pages[.]dev/robots[.]txt
  •  hxxps://nald9qqhzot0[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pactic3[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://suggestingafamspages[.]z13[.]web[.]core[.]windows[.]net/feamd3prfesd-sdpo1vfrepsc-dpso4difresc-dpso2dfdepwsdc-dspod5iowalsc-dspodi2feowsc-dspod6ewsd-psodhf4esoid-dc0vfr2epsodc-d0fep4sbhnmdocsdpo/003/index[.]html
  •  hxxps://igp3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://igp3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://oiuoiuu[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://oiuoiuu[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://sdsd31[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index[.]html?Anph=null
  •  hxxps://ippoipoip-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://ippoipoip-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://eddd9[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-310-3264
  •  hxxps://virus-ai-report[.]pages[.]dev/windows02882elrt/
  •  hxxps://walcome2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://walcome2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84347-53344
  •  hxxps://ld0fiqsqyxcb[.]pages[.]dev/smart89/
  •  hxxps://tmkcbkl7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tmkcbkl7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://26th6k1w9j3b62681[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://kldjkljlkj-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://defendwindow[.]financedigitalwise[.]com/
  •  hxxps://rose-65m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sonotelwonotelponotel[.]pages[.]dev/
  •  hxxps://serviceappinfms12[.]pages[.]dev/
  •  hxxps://osbezkltifaco[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://won-ccf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://novcab2121-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86658-15229
  •  hxxps://moussaa121-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://jiffy3[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-864-373-8528
  •  hxxps://sdgvghdssdms1[.]pages[.]dev/
  •  hxxps://tmkcbkl6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://tmkcbkl6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://preventthegametesmost[.]z13[.]web[.]core[.]windows[.]net/Ujeiw3skcjdeos5lkc-0fepsok3fieowsc-dpofe2pslfoes-pofep4sockvifdc-fdpocfe2pslcvespdode4psl-meds7dhwe3hwsd-azcus7whsdscwembjd/index[.]html
  •  hxxps://hawkings[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dadasasdasa[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80282-93448
  •  hxxps://micros-dku[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://horse-7io[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ioipoiopu[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ioipoiopu[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://phonessada[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://phonessada[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rrred3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://rrred3[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://rrred4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://festqwqwyuyiu[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://mango-wave-03d1e4610[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://microsoft-ai-alert[.]pages[.]dev/windows02882elrt/
  •  hxxps://germe4[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://phonessadawqwwwq[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://fixxed6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://websjdfpwebsnvuhg[.]z13[.]web[.]core[.]windows[.]net/oscds4pdofe-spc-ews0dofe2wsl5cfesd-fewsp5cofes-epsdocf3reps6dcpd-he3wisjcdw5oaskc-sd0frewp2oskci4dewsc-fespdc2ovfeps-spco2psxcd/index[.]html
  •  hxxps://festqwqwmmmmnnm[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://fpgg3[.]pages[.]dev/robots[.]txt
  •  hxxps://wqwqwqw-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://wqwqwqw-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85969-37083
  •  hxxps://ggth2[.]pages[.]dev/W0in0sNw0HeDe01Er057/
  •  hxxps://adaptivesxadvantages[.]z13[.]web[.]core[.]windows[.]net/Yshde3woskjf5eoskcd-sd0f9rewos3kc5jdiescd-esif2ewpsods-c0fdespo4ce7owskc-dpdocf3ewpos-fepso2dcivfosc-fdo4fdeosd-s0dewp2sod/index[.]html
  •  hxxps://ioipoipoio[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://dawsewaa[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80231-03264
  •  hxxps://kuhsrdqsflefkzyq3ci[.]pages[.]dev/smart89/
  •  hxxps://florinejaniszycyou[.]pages[.]dev/RIYroFrT/
  •  hxxps://host-ap2[.]pages[.]dev/Wi0n0erAry0mpAlert048/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.