2024-10-15 - Tech Support Scam - Phishing Capmapign Observation Alert

65 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 65 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://awqqllp552-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://wqwqwqqq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://desktop-network-alert-201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jhasuagbu2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
  •  hxxps://milkyway-dag[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://charger-68s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://a1-8st[.]pages[.]dev/
  •  hxxps://eqwqwqwq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://eqwqwqwq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://viurtffka1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://stydcgyhms11[.]pages[.]dev/
  •  hxxps://wegv5634rghwev[.]pages[.]dev/
  •  hxxps://delightful-mushroom-02b9a1410[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://steady-salmiakki-2bf1ce[.]netlify[.]app/
  •  hxxps://feeding2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://feeding2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nnbvt1[.]pages[.]dev/robots[.]txt
  •  hxxps://naughtyengagevdosx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://xuwsr3[.]pages[.]dev/
  •  hxxps://dtywcvyweytywems21[.]pages[.]dev/
  •  hxxps://tyvvr4[.]pages[.]dev/
  •  hxxps://zaxaaaq-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://zaxaaaq-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://f2u9dzffhv7jx[.]pages[.]dev/smart89/
  •  hxxps://team-ast[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://feeding1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://feeding1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://viurtffka[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://viurtffka[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://separatepublishing[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hig8-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://p0rnsbellessaqus[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ansdg4[.]pages[.]dev/
  •  hxxps://asw14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://asw14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hbvg-h3im2[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://hig4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://lookupsinsetr[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ffffffeee[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://ffffffeee[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahstacasfffe77[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://file-533[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://10th5p2m8y4v45773[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bcskh1[.]pages[.]dev/robots[.]txt
  •  hxxps://viurtffka-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://iron-90w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://feeding4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://bcdtk1[.]pages[.]dev/
  •  hxxps://webcoreblock[.]me/
  •  hxxps://mouse-6rt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-app-system123[.]pages[.]dev/
  •  hxxps://orgiasticfocused[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viurtffka3[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mamaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mamaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://app16jdsj[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-20641-08469
  •  hxxps://xbgytag11-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://asytafqqtt1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://bcskh5[.]pages[.]dev/
  •  hxxps://d8268d6a3697412aa56f[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://planet-bah[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://device-user-alert-12086[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ahstacasfffe0-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://secure-app15-system[.]pages[.]dev/
  •  hxxps://gray-stone-07e36c110[.]5[.]azurestaticapps[.]net//Win08ShDMeEr0887/index[.]html
  •  hxxps://xuwsr5[.]pages[.]dev/
  •  hxxps://fullypornkyxxsprt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ioiooio[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://ioiooio[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mcmmanna[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mcmmanna[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dsdcvff31[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpShSaErr0t0467/index[.]html?Anph=null
  •  hxxps://inf0egtebwqms11a2[.]pages[.]dev/
  •  hxxps://security-alert[.]alertphase1[.]xyz/Wi0n0erAry0mpAlert048/index[.]html
  •  hxxps://time-5i2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdcx-2ofhh[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxp://getjo05p01[.]club/wr/?p=(0101)-&
  •  hxxps://asytafqqtt1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://asytafqqtt1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hispl432142s1dfsfas13[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://feeding4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://feeding4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ansdg3[.]pages[.]dev/
  •  hxxps://exporntvxx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://motionseductioninserts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zzzxaaa-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://zzzxaaa-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://bcdtk4[.]pages[.]dev/
  •  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://flat-1ve[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nmnbbhh-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://nmnbbhh-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://66e2f0c5c2729900b0566be2--charming-sopapillas-d325e2[.]netlify[.]app/
  •  hxxps://feeding2[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://byvtc2[.]pages[.]dev/robots[.]txt
  •  hxxps://ioiooio-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://clericsmonksxaz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://xuwsr1[.]pages[.]dev/robots[.]txt
  •  hxxps://xuwsr1[.]pages[.]dev/
  •  hxxps://disk-13j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://frog-e49[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jkksdsds766sxssxxs[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-805-204-7832
  •  hxxps://lbgsd1[.]pages[.]dev/
  •  hxxps://genreator[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://metro-dr8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tyvvr5[.]pages[.]dev/
  •  hxxps://aassxza-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://aassxza-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://xuwsr4[.]pages[.]dev/
  •  hxxps://mbdyms1[.]pages[.]dev/
  •  hxxps://phone-6ao[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://materialsexedicts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://food-6sz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ppppaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://ppppaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://10th9k1w6j3b98343[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://a583232f1ebd43b0bf17[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://nxuyt4[.]pages[.]dev/robots[.]txt
  •  hxxps://game-2yr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dhvfgyfvuy4464vdhd[.]pages[.]dev/
  •  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmmm-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://pot-79w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://r1sdhgghgh56fyds[.]pages[.]dev/
  •  hxxps://support-bxv[.]pages[.]dev/
  •  hxxps://cap-4jh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bcskh4[.]pages[.]dev/
  •  hxxps://beginningtransaction[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://lsdo-buf4m[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://ozfcselobikat[.]z21[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://jg9akelekqgh9xg[.]pages[.]dev/smart89/
  •  hxxps://insta-71r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://socioeconomicpostcards[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hig6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://razi1256[.]d35nrzpaaw4jbw[.]amplifyapp[.]com/
  •  hxxps://ikmf2wevqjsottbu[.]pages[.]dev/smart89/
  •  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ednzexc6eozcv7dwywcdugh2rytjwl28ybvw[.]pages[.]dev/smart89/
  •  hxxps://acid-cvw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://awqqllp552[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://viytrvv4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://viytrvv4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://galaxy-1nd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ansvghajs033[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://microsofy-system-update[.]pages[.]dev/
  •  hxxps://wtsyd1cqdv3p5z7[.]pages[.]dev/smart89/
  •  hxxps://qmzpu4[.]pages[.]dev/robots[.]txt
  •  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://mate-76o[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fiiiirrrrrrrsssssttttt[.]pages[.]dev/
  •  hxxps://entic2wexciting[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://addition[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eddyjtvfpavz[.]pages[.]dev/smart89/
  •  hxxps://56edthdxfhbx[.]pages[.]dev/
  •  hxxps://serviceca11appca11he1pn0w11[.]pages[.]dev/
  •  hxxps://lbgsd4[.]pages[.]dev/robots[.]txt
  •  hxxps://slycbmdsikmz[.]pages[.]dev/smart89/
  •  hxxps://nxuyt5[.]pages[.]dev/
  •  hxxps://mbmmbvvv-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://tinsigolucker[.]pages[.]dev/
  •  hxxps://ansdg2[.]pages[.]dev/robots[.]txt
  •  hxxps://viytrvv[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://cover-e94[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://glass-1pn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://10th2s8d4x7g56012[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nnbvt3[.]pages[.]dev/robots[.]txt
  •  hxxps://10th2s8d4x7g56011[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mahgsdatv7[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-369-1816
  •  hxxps://chair-btr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cycle-6hl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://viurtffka3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://viurtffka3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmaaq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://windows-services-update[.]pages[.]dev/
  •  hxxps://twl7nlqhdoq[.]pages[.]dev/smart89/
  •  hxxps://mjiuuukl2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mjiuuukl2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://asw13[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://asw13[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://uuy18-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-269-1312
  •  hxxps://uuy18-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://microsoft-support-help1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://magneseum[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wec44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://wec44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://feeding5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://app-inf0-service2[.]pages[.]dev/folder1/
  •  hxxps://zzzxaaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://zzzxaaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hakredsxclassical[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://key-equ[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bcskh2[.]pages[.]dev/
  •  hxxps://fhhdfvdfgkfd[.]github[.]io/Microsoft/
  •  hxxps://ahstacasfffe0[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://cotui2[.]pages[.]dev/
  •  hxxps://uywfg344rruyywewegwegfegf[.]pages[.]dev/
  •  hxxps://bhvg-66sjt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://usa1ideasanguinweb04[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-3442
  •  hxxps://dfhfg5454[.]pages[.]dev/
  •  hxxps://mmnnbv-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://wqwqwqqq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://wqwqwqqq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mjiuuukl[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://jltnm7ux9ko[.]pages[.]dev/smart89/
  •  hxxps://mmnhtytrr[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://anshgytrfgv12-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://anmsjgytg034-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://song-tyh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wec43[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://wec43[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://nebvrfwgmifywz[.]azureedge[.]net/9796/
  •  hxxps://nxuyt3[.]pages[.]dev/
  •  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://plate-eaz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mamaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mamaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://uuy11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6361
  •  hxxps://wec44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://acwefre34sd[.]pages[.]dev/
  •  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://corcodile[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://owl-1tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://flame-bww[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://chair-eza[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://aeroplane[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://witty-island-08efed010[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://sghcsghms1[.]pages[.]dev/
  •  hxxps://tronlx8uamj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zealous-smoke-0e129af10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://spoon-2ds[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fbsetaozcoilk[.]z19[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://train-2u7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://anmsjgytg05-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://bangbrosrandoms[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pot-4lb[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ashgcghsd5623r23r67sdv[.]pages[.]dev/
  •  hxxps://desktop-alert-new-123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ben5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-8600
  •  hxxps://trestropaticmax[.]pages[.]dev/
  •  hxxps://tauji4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://kqrbsijsxyrq0fi[.]pages[.]dev/smart89/
  •  hxxps://yrdyh4srt[.]pages[.]dev/
  •  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://vdfn-cjmsc[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://nxuyt2[.]pages[.]dev/
  •  hxxps://8030qtu9r31odwt6nl9cmjhp[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mjiuuukl2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mjiuuukl2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tauji4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://xvideosfetish[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://54e4trdry56sdxrfg[.]pages[.]dev/
  •  hxxps://nice-river-002ec3110[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://awqqllp66[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://awqqllp66[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://viytrvv-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://red-desert-0137b6f10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hdlu8y0spj1n2xy7h7[.]pages[.]dev/smart89/
  •  hxxps://radio-8x4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://winrisk[.]digital/
  •  hxxps://dxrtszefcgchbms11[.]pages[.]dev/
  •  hxxps://play-e2k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
  •  hxxps://801013lht4776af5cdnlla0g[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asfvnasf5at22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
  •  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://r1sduycvjhsdjh[.]pages[.]dev/
  •  hxxps://cotui1[.]pages[.]dev/
  •  hxxps://tauji7-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://hgghc56dtydy[.]pages[.]dev/
  •  hxxps://bcdtk3[.]pages[.]dev/
  •  hxxps://ansdg5[.]pages[.]dev/
  •  hxxps://wire-8mx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://viurtffka1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://llbsdk3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
  •  hxxps://feeding1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://microsoft-device-alert-0192[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://llbsdk1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ttilkun[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://qmzbjcfqpzbt6bkd[.]pages[.]dev/smart89/
  •  hxxps://sexualizedrefers[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://document-8xv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://anmsjgytg034[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://anmsjgytg034[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://qazaqa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://qazaqa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://lbgsd2[.]pages[.]dev/
  •  hxxps://t21bln2t6bqz5[.]pages[.]dev/smart89/
  •  hxxps://app-6u3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bcdtk5[.]pages[.]dev/
  •  hxxps://btcre5[.]pages[.]dev/
  •  hxxps://hig8[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig8[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://sortedhainasab[.]pages[.]dev/
  •  hxxps://llbsdk3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://peeqkkfrk3lriurgqlmyu2rkywuem0mahs[.]pages[.]dev/smart89/
  •  hxxps://mmnnbv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ffffffeee-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://ffffffeee-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gu67rt4usdvghds[.]pages[.]dev/
  •  hxxps://fgxcfg56edtydch[.]pages[.]dev/
  •  hxxps://streamxxtvs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aax4qxqlxdnhr1bes[.]pages[.]dev/smart89/
  •  hxxps://ppppaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://ppppaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://earth-d4g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://z6qvfbefjxqlpg51s[.]pages[.]dev/smart89/
  •  hxxps://ytwefvgwe6734rgjwehv[.]pages[.]dev/
  •  hxxps://tuhbkl6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
  •  hxxps://xuwsr2[.]pages[.]dev/robots[.]txt
  •  hxxps://pushalcm7yj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://torch-8al[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://page-ey6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://secure-app-system12345[.]pages[.]dev/
  •  hxxps://sdfucvg34ggsdgcghds[.]pages[.]dev/
  •  hxxp://carjo04p01[.]club/wr/?p=(0101)-&
  •  hxxps://news-4mx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://device-alert-12123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ksdj387dsgduy12f7f6ewyqfeuqwfeyequ[.]s3[.]eu-central-003[.]backblazeb2[.]com/0388[.]html
  •  hxxps://pea-f0k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-device-alert-1201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mmmm[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://r1guysdvcjhvghsd[.]pages[.]dev/
  •  hxxps://football-244[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://doxx3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-467-7970
  •  hxxps://dailyuoatesbts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://classicalsorrowsjoys[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://g9iifqdwg3qbrpsqqvgt1ugv5cunaocwhuzbg3zfgubs2ueb1[.]pages[.]dev/smart89/
  •  hxxps://hotclassygreatgirls[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://byvtc3[.]pages[.]dev/
  •  hxxps://viytrvv4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://r1sdgcvsdgh342[.]pages[.]dev/
  •  hxxps://sdv4uwefv[.]pages[.]dev/
  •  hxxps://usabc[.]pages[.]dev/
  •  hxxps://anshgytrfgv12[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://anshgytrfgv12[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://secure-app18-system[.]pages[.]dev/
  •  hxxps://micro-soft-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hardware-a39[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://datingweb[.]online/?MD
  •  hxxps://datingweb[.]online/?MA
  •  hxxps://ijkjut89-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6888
  •  hxxps://b953859a-14e7-4e0a-bb24-73262bad27c6[.]s3[.]ap-northeast-2[.]amazonaws[.]com/%5E%25$&$!%25$!%23%5E@%25$$%23%5E%23%5E&@$%25!$&%25@@!$&%23!%23!&%5E%23%5E%23%5E!%23%25/index[.]html?c=dc4cf4c10aee56fd7b781030a6a20893&d=ca&ip=platform:8dded44720b36b[.][.][.]~311~[.][.][.]6985dd083e7b1d0e3c9e4f42159385/
  •  hxxps://plane-7jl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tyvvr3[.]pages[.]dev/
  •  hxxps://mmnhtytrr-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mmnhtytrr-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://doxx3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-201-5562
  •  hxxps://project-e6g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bed-20k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://done4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-856-655-8311
  •  hxxps://micro-service-alertc0277sb-error123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://lbgsd3[.]pages[.]dev/robots[.]txt
  •  hxxps://tyvvr2[.]pages[.]dev/
  •  hxxps://ansvghajs033-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ansvghajs033-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://lxxje4y0kzcscphzmph0oc3zwz3jeqeadvuvdth1fcvourjmy1pw[.]pages[.]dev/smart89/
  •  hxxps://desktop-alert-error-2100[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ghftyfh[.]github[.]io/fyugjfv/
  •  hxxps://tyvvr1[.]pages[.]dev/
  •  hxxps://iohuieslyv1p76oz[.]pages[.]dev/smart89/
  •  hxxps://sdgycg6734rw3r[.]pages[.]dev/
  •  hxxps://gfact6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://fuiergheguysdms11[.]pages[.]dev/
  •  hxxps://hgmkcbfljphw[.]pages[.]dev/smart89/
  •  hxxps://anmsjgytg01-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://anmsjgytg01-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://opd4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://micro-service-alertc0277sb-erroras[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://inspireyoursexlife[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://azure-gpjs17gg7-robby8824[.]vercel[.]app/
  •  hxxps://s3wqokqmcbx[.]pages[.]dev/smart89/
  •  hxxps://54rtssgfsedzd[.]pages[.]dev/
  •  hxxps://nsvfaeq33-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
  •  hxxps://nsvfaeq33-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-224-7747
  •  hxxps://cfxd-y7gdk[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://micro-service-alertc0277sb-realsk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://domain-c8c[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://towel[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://brhycawdt1jk93u[.]pages[.]dev/smart89/
  •  hxxps://bondagexxvideos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://feykhjkh9fnnzpetk2w7znycoftiyjlm[.]pages[.]dev/smart89/
  •  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://bcskh3[.]pages[.]dev/
  •  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://micro-service-alertc0277sb-alertserrors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://baseball-dcp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://anhyuiitt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://anhyuiitt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://software-9ah[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://qmzpu2[.]pages[.]dev/robots[.]txt
  •  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://zaxaaaq[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://city-8s1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-service-alert-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fan-cyj[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://anmsjgytg01[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://anmsjgytg01[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://win2-z13-web-core-windows-net[.]pages[.]dev/
  •  hxxps://insta10-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-0510
  •  hxxps://iojn-5gg5n[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://secure-app13-system[.]pages[.]dev/
  •  hxxps://dgvgj43evfj[.]pages[.]dev/
  •  hxxps://microsoft-new-device-error-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oyster-app-a8q2s[.]ondigitalocean[.]app/
  •  hxxps://uuy19-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-1199
  •  hxxps://vs47zjozg2co[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kala098[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-283-5212
  •  hxxps://adapter[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-service-alert-233-212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nsvfaeq4-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://nxuyt1[.]pages[.]dev/
  •  hxxps://timorotomo[.]top/mikasa/
  •  hxxps://windowdefalerts-error0x21908-alert-virus-detected[.]pages[.]dev/
  •  hxxps://secure-app19-system[.]pages[.]dev/
  •  hxxps://window-csn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://uuy11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-670-9964
  •  hxxps://feeding3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://feeding3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://mcmmanna-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://mcmmanna-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://rs1hgcgbvfghxcg5[.]pages[.]dev/
  •  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://explreeacszxqusn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tuhbkl8-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-8600
  •  hxxps://paper-2lx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://watchonlineforfree[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://secure-app16-system[.]pages[.]dev/
  •  hxxps://wec43-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://llbsdk6-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-224-7747
  •  hxxps://ahstacasfffe77-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://ttilkun-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ttilkun-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://llbsdk4[.]z33[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-808-218-3280
  •  hxxps://calcium-3kq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://byug7qo8kkkloqibzin4yoibtnoolp4jac[.]pages[.]dev/smart89/
  •  hxxps://erfd-8xoyl[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://staging[.]dwta6w74teg3x[.]amplifyapp[.]com/Win08ShDMeEr0887/index[.]html
  •  hxxps://ghavsdtysasgbuefhmc[.]pages[.]dev/
  •  hxxps://cotui4[.]pages[.]dev/
  •  hxxps://bcdtk2[.]pages[.]dev/
  •  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://microsoft-error-pages-check-erros[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://qazaqa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://qazaqa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://jetplane[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://awqqllp66-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://awqqllp66-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://remote-eqo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://pub-83b6ecec1922429d9d4a51bea400766a[.]r2[.]dev/1060[.]html
  •  hxxps://uerj-eup26[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php
  •  hxxps://10th3n7c1r9f08061[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sdgshs01sdfhfkfgfgf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://11th7p3n9c2f84103[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://edsx-nznop[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://fkucc2024[.]lovestoblog[.]com/?i=1
  •  hxxps://orange-bush-04cb4d610[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://d284puh4b9ulso[.]cloudfront[.]net/wr/?p=(0101)-20899-47181&
  •  hxxps://fgxg56dffg[.]pages[.]dev/
  •  hxxps://thankful-field-03f5c4610[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://car-90r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://hotjpviralsubiftgchszx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cplouty9m2[.]pages[.]dev/smart89/
  •  hxxps://asw13-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://asw13-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://a3326a9217764743a600[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aassxza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://aassxza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://tauji3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://nsvfaeq0-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nsvfaeq0-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://sadswerg34dfvf[.]pages[.]dev/
  •  hxxps://asw14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://m5p7xtotzy8wry[.]pages[.]dev/smart89/
  •  hxxps://mbmmbvvv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mbmmbvvv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nnbvt4[.]pages[.]dev/
  •  hxxps://updatepornseachday[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://secure-app20-system[.]pages[.]dev/
  •  hxxps://beauty-7tc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zsae-ocjyt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://hig6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://hig5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://ansdg1[.]pages[.]dev/
  •  hxxps://anhyuiitt[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://umbrella-61s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://r1gsdcgsdv36dgvc[.]pages[.]dev/
  •  hxxps://byvtc4[.]pages[.]dev/
  •  hxxps://secure-app11-system[.]pages[.]dev/
  •  hxxps://micasdrosftasd22266[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nsvfaeq4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://nsvfaeq4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://kala098-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
  •  hxxps://shungavolumesexscnd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mmaaq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mmaaq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://main[.]d2m3dga6zuxfet[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://nsvfaeq0[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://nsvfaeq0[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tuhbkl4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-366-5296

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.