2024-10-16 - Tech Support Scam - Phishing Capmapign Observation Alert

122 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 122 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

•  hxxps://awqqllp552-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://desktop-network-alert-201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://jhasuagbu2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
•  hxxps://charger-68s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://dcfdg32[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpShSaErr0t0467/index[.]html?Anph=null
•  hxxps://a1-8st[.]pages[.]dev/
•  hxxps://eqwqwqwq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://eqwqwqwq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://viurtffka1-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://stydcgyhms11[.]pages[.]dev/
•  hxxps://wegv5634rghwev[.]pages[.]dev/
•  hxxps://wheat-4dl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://delightful-mushroom-02b9a1410[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://steady-salmiakki-2bf1ce[.]netlify[.]app/
•  hxxps://feeding2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://feeding2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://naughtyengagevdosx[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://p0rnsvirtualreality[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://xuwsr3[.]pages[.]dev/
•  hxxps://easyk73[.]sg-host[.]com/usa/wah[.]html
•  hxxps://dtywcvyweytywems21[.]pages[.]dev/
•  hxxps://tyvvr4[.]pages[.]dev/
•  hxxps://f2u9dzffhv7jx[.]pages[.]dev/smart89/
•  hxxps://team-ast[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://feeding1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://feeding1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://viurtffka[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://viurtffka[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://separatepublishing[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://hig8-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://sea-turtle-app-v574y[.]ondigitalocean[.]app/Wi0n0Err0Sudu0087/index[.]html
•  hxxps://gift-9un[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://p0rnsbellessaqus[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://main[.]d1mclzrc1yya8w[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
•  hxxps://sexcondemnedappeal[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://hbvg-h3im2[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
•  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://mjiuuukl-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://hig4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://lookupsinsetr[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://ffffffeee[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://ffffffeee[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ahstacasfffe77[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://10th5p2m8y4v45773[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://bcskh1[.]pages[.]dev/robots[.]txt
•  hxxps://viurtffka-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://iron-90w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://feeding4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://webcoreblock[.]me/
•  hxxps://mouse-6rt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://secure-app-system123[.]pages[.]dev/
•  hxxps://orgiasticfocused[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://viurtffka3[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://app16jdsj[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-20641-08469
•  hxxps://condemnationgrossly[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://xbgytag11-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://jungle-4zl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://asytafqqtt1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://bcskh5[.]pages[.]dev/
•  hxxps://app16aa002[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-20247-44528
•  hxxps://device-user-alert-12086[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ahstacasfffe0-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://secure-app15-system[.]pages[.]dev/
•  hxxps://gray-stone-07e36c110[.]5[.]azurestaticapps[.]net//Win08ShDMeEr0887/index[.]html
•  hxxps://xuwsr5[.]pages[.]dev/
•  hxxps://fullypornkyxxsprt[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://ghost22-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://starzbet52[.]com/land/
•  hxxps://mcmmanna[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://mcmmanna[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://inf0egtebwqms11a2[.]pages[.]dev/
•  hxxps://easyk76[.]sg-host[.]com/usa/ten[.]html
•  hxxps://studiosrecordproduce[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://time-5i2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://sdcx-2ofhh[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxp://getjo05p01[.]club/wr/?p=(0101)-&
•  hxxps://asytafqqtt1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://asytafqqtt1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://feeding4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://feeding4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://diamond-8or[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://motionseductioninserts[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://zzzxaaa-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://zzzxaaa-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://sdvsdhfvf44[.]pages[.]dev/
•  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://xbgytag11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://flat-1ve[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://nmnbbhh-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://nmnbbhh-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://66e2f0c5c2729900b0566be2--charming-sopapillas-d325e2[.]netlify[.]app/
•  hxxps://feeding2[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://easyk75[.]sg-host[.]com/usa/wah[.]html
•  hxxps://clericsmonksxaz[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://xuwsr1[.]pages[.]dev/robots[.]txt
•  hxxps://xuwsr1[.]pages[.]dev/
•  hxxps://disk-13j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://frog-e49[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://jerry-3ln[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://monkey-4s6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://genreator[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://metro-dr8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://tyvvr5[.]pages[.]dev/
•  hxxps://albtskioczoef[.]z15[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
•  hxxps://aassxza-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://aassxza-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://bgtgggfdt12-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://xuwsr4[.]pages[.]dev/
•  hxxps://mbdyms1[.]pages[.]dev/
•  hxxps://imln9km5c3rrynvb[.]pages[.]dev/smart89/
•  hxxps://telephone-uly[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://phone-6ao[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://materialsexedicts[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://food-6sz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ppppaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://ppppaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://wonderful-tereshkova-4751d4[.]netlify[.]app/
•  hxxps://iugv-go4s5[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-7647
•  hxxps://10th9k1w6j3b98343[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://ghost6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ghost6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://zexd-rq4gx[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://nxuyt4[.]pages[.]dev/robots[.]txt
•  hxxps://game-2yr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://dhvfgyfvuy4464vdhd[.]pages[.]dev/
•  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://feeding3[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://mmmm-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://pot-79w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://r1sdhgghgh56fyds[.]pages[.]dev/
•  hxxps://doreamon-2lg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://cap-4jh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://bcskh4[.]pages[.]dev/
•  hxxps://beginningtransaction[.]pages[.]dev/W08Myr0hotline0JP07/
•  hxxps://lsdo-buf4m[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://insta-71r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://judgingbeingp0rn[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://feeding6[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://feeding6[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://socioeconomicpostcards[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://hig6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://razi1256[.]d35nrzpaaw4jbw[.]amplifyapp[.]com/
•  hxxps://door-c2m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ikmf2wevqjsottbu[.]pages[.]dev/smart89/
•  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://acid-cvw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://awqqllp552[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://potato-1qe[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://viytrvv4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://viytrvv4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ghost1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://goldfish-app-yt394[.]ondigitalocean[.]app/Wi0n0Err0Sudu0087/index[.]html
•  hxxps://ansvghajs033[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://microsofy-system-update[.]pages[.]dev/
•  hxxps://qmzpu4[.]pages[.]dev/robots[.]txt
•  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://anmsjgytg05[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://mate-76o[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ghost4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://fiiiirrrrrrrsssssttttt[.]pages[.]dev/
•  hxxps://entic2wexciting[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://win[.]cheker[.]macos[.]os[.]pro[.]cheker[.]clothingj[.]com/
•  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://addition[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://eddyjtvfpavz[.]pages[.]dev/smart89/
•  hxxps://bahystfa12[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-283-6788
•  hxxps://56edthdxfhbx[.]pages[.]dev/
•  hxxps://serviceca11appca11he1pn0w11[.]pages[.]dev/
•  hxxps://slycbmdsikmz[.]pages[.]dev/smart89/
•  hxxps://nxuyt5[.]pages[.]dev/
•  hxxps://tinsigolucker[.]pages[.]dev/
•  hxxps://viytrvv[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://glass-1pn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://10th2s8d4x7g56012[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://10th2s8d4x7g56011[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://mahgsdatv7[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-369-1816
•  hxxps://chair-btr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://cycle-6hl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://hig7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://viurtffka3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://viurtffka3-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://mmaaq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://windows-services-update[.]pages[.]dev/
•  hxxps://twl7nlqhdoq[.]pages[.]dev/smart89/
•  hxxps://mjiuuukl2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://mjiuuukl2-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://microsoft-support-help1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://magneseum[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://feeding5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://app-inf0-service2[.]pages[.]dev/folder1/
•  hxxps://shop-beq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://zzzxaaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://zzzxaaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hakredsxclassical[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://bcskh2[.]pages[.]dev/
•  hxxps://acrossconstraints[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://ahstacasfffe0[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://bgtgggfdt3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://bgtgggfdt3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://vaftrrqq09[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-0208
•  hxxps://uywfg344rruyywewegwegfegf[.]pages[.]dev/
•  hxxps://bhvg-66sjt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
•  hxxps://dfhfg5454[.]pages[.]dev/
•  hxxps://theatricaloutletxs[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://gfact8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://mjiuuukl[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://jltnm7ux9ko[.]pages[.]dev/smart89/
•  hxxps://mmnhtytrr[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anshgytrfgv12-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anmsjgytg034-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://song-tyh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://nebvrfwgmifywz[.]azureedge[.]net/9796/
•  hxxps://nxuyt3[.]pages[.]dev/
•  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://plate-eaz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://www[.]relfinl[.]com/
•  hxxps://acwefre34sd[.]pages[.]dev/
•  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://corcodile[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://owl-1tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://gccc1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://gccc1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://flame-bww[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://chair-eza[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://aeroplane[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://witty-island-08efed010[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://microsoft-secure-app-v55hf[.]ondigitalocean[.]app/?phone=+1-866-204-3090
•  hxxps://zealous-smoke-0e129af10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://starzbet42[.]com/land/
•  hxxps://train-2u7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://klecbofiatozs[.]z21[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
•  hxxps://anmsjgytg05-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://bangbrosrandoms[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://sdgdhdfhd04fkkfda[.]z13[.]web[.]core[.]windows[.]net/fhfgjd04[.]html
•  hxxps://land-f1f[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://desktop-alert-new-123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ben5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-8600
•  hxxps://trestropaticmax[.]pages[.]dev/
•  hxxps://tauji4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://kqrbsijsxyrq0fi[.]pages[.]dev/smart89/
•  hxxps://zcblak8sul[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://yrdyh4srt[.]pages[.]dev/
•  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://bag-4i7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://vdfn-cjmsc[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://nxuyt2[.]pages[.]dev/
•  hxxps://microsoft-topic-ze2tb[.]ondigitalocean[.]app/?phone=+1-866-204-3090
•  hxxps://postcardsmostweb[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://ca11he1lpn0wrnre1123[.]pages[.]dev/
•  hxxps://mjiuuukl2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://mjiuuukl2[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://tauji4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://xvideosfetish[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://mahftgb322-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-3226
•  hxxps://54e4trdry56sdxrfg[.]pages[.]dev/
•  hxxps://nice-river-002ec3110[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://awqqllp66[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://awqqllp66[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://viytrvv-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://red-desert-0137b6f10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hdlu8y0spj1n2xy7h7[.]pages[.]dev/smart89/
•  hxxps://hatori-23e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://radio-8x4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://winrisk[.]digital/
•  hxxps://play-e2k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
•  hxxps://asfvnasf5at22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
•  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://eqwqwqwq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://r1sduycvjhsdjh[.]pages[.]dev/
•  hxxps://car-6l7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://tauji7-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://bgtgggfdt12[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://laptop-c7a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://hgghc56dtydy[.]pages[.]dev/
•  hxxps://wire-8mx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://viurtffka1[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://ninja-53f[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://feeding1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://microsoft-device-alert-0192[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://switch-c47[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://galaxy-lck[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ttilkun[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://qmzbjcfqpzbt6bkd[.]pages[.]dev/smart89/
•  hxxps://sexualizedrefers[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://document-8xv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://anmsjgytg034[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://anmsjgytg034[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://qazaqa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://qazaqa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://djsahe8wqydsaugdisuage8yewuewqisa[.]s3[.]eu-central-003[.]backblazeb2[.]com/9194[.]html
•  hxxps://app-6u3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://mhuieyiwqyewqujdsiuet78wqtewqgdshagewqg[.]s3[.]eu-central-003[.]backblazeb2[.]com/0388[.]html?
•  hxxps://hig8[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hig8[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://star-27q[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ghost4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ghost4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://money-bos[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://peeqkkfrk3lriurgqlmyu2rkywuem0mahs[.]pages[.]dev/smart89/
•  hxxps://sjfgdskjfhkj-lskhddsf-xjwgq[.]ondigitalocean[.]app/?phone=+1-833-582-4034
•  hxxps://ffffffeee-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://ffffffeee-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://streamxxtvs[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://ppppaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://ppppaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://hig3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://fdcx-2lkr8[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://z6qvfbefjxqlpg51s[.]pages[.]dev/smart89/
•  hxxps://thiiirrrrddddddd-30x[.]pages[.]dev/_fm7-alert[.]mp3
•  hxxps://ficet9[.]shop/pop/pop/?tk=1kspfq4dcgonvtwytod8h92nf5uljecx/
•  hxxps://tuhbkl6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
•  hxxps://xuwsr2[.]pages[.]dev/robots[.]txt
•  hxxps://ewvzkukwlz9aljj[.]pages[.]dev/smart89/
•  hxxps://pushalcm7yj[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://torch-8al[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://gccc1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://hig7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxp://carjo04p01[.]club/wr/?p=(0101)-&
•  hxxps://news-4mx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://device-alert-12123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ksdj387dsgduy12f7f6ewyqfeuqwfeyequ[.]s3[.]eu-central-003[.]backblazeb2[.]com/0388[.]html
•  hxxps://micro-device-alert-1201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://mmmm[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://r1guysdvcjhvghsd[.]pages[.]dev/
•  hxxps://football-244[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://doxx3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-467-7970
•  hxxps://birthday-4pq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://guitar-5pr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://dailyuoatesbts[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://classicalsorrowsjoys[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://g9iifqdwg3qbrpsqqvgt1ugv5cunaocwhuzbg3zfgubs2ueb1[.]pages[.]dev/smart89/
•  hxxps://hotclassygreatgirls[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://viytrvv4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://ghost22[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://r1sdgcvsdgh342[.]pages[.]dev/
•  hxxps://sdv4uwefv[.]pages[.]dev/
•  hxxps://anshgytrfgv12[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://anshgytrfgv12[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://variousratingsutraxx[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://bgtgggfdt98[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://bgtgggfdt98[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hardware-a39[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://datingweb[.]online/?MD
•  hxxps://datingweb[.]online/?MA
•  hxxps://ijkjut89-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6888
•  hxxps://plane-7jl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://tyvvr3[.]pages[.]dev/
•  hxxps://mmnhtytrr-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://mmnhtytrr-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://doxx3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-201-5562
•  hxxps://bed-20k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://done4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-856-655-8311
•  hxxps://micro-service-alertc0277sb-error123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://rocket-e2u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ghost1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ghost1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://lbgsd3[.]pages[.]dev/robots[.]txt
•  hxxps://tubelight[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://stataadi0-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://stataadi0-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://tyvvr2[.]pages[.]dev/
•  hxxps://heart-7wt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ansvghajs033-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ansvghajs033-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://lxxje4y0kzcscphzmph0oc3zwz3jeqeadvuvdth1fcvourjmy1pw[.]pages[.]dev/smart89/
•  hxxps://dsuyhvh34df[.]pages[.]dev/
•  hxxps://desktop-alert-error-2100[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://ghftyfh[.]github[.]io/fyugjfv/
•  hxxps://tyvvr1[.]pages[.]dev/
•  hxxps://iohuieslyv1p76oz[.]pages[.]dev/smart89/
•  hxxps://bgtgggfdt9-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://bgtgggfdt9-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://gfact6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://fuiergheguysdms11[.]pages[.]dev/
•  hxxps://anmsjgytg01-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anmsjgytg01-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://opd4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://micro-service-alertc0277sb-erroras[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://inspireyoursexlife[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://azure-gpjs17gg7-robby8824[.]vercel[.]app/
•  hxxps://s3wqokqmcbx[.]pages[.]dev/smart89/
•  hxxps://54rtssgfsedzd[.]pages[.]dev/
•  hxxps://nsvfaeq33-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
•  hxxps://nsvfaeq33-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-224-7747
•  hxxps://cfxd-y7gdk[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://micro-service-alertc0277sb-realsk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://domain-c8c[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://towel[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://brhycawdt1jk93u[.]pages[.]dev/smart89/
•  hxxps://bondagexxvideos[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://feeding6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://feykhjkh9fnnzpetk2w7znycoftiyjlm[.]pages[.]dev/smart89/
•  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://bcskh3[.]pages[.]dev/
•  hxxps://badminton-418[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://nmnbbhh[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://micro-service-alertc0277sb-alertserrors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://stataadi0[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://stataadi0[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://baseball-dcp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://anhyuiitt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anhyuiitt-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://software-9ah[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://qmzpu2[.]pages[.]dev/robots[.]txt
•  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://city-8s1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://micro-service-alert-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://fan-cyj[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://anmsjgytg01[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://anmsjgytg01[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://iojn-5gg5n[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
•  hxxps://highway-2qq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://secure-app13-system[.]pages[.]dev/
•  hxxps://dgvgj43evfj[.]pages[.]dev/
•  hxxps://microsoft-new-device-error-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://kala098[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-283-5212
•  hxxps://adapter[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://micro-service-alert-233-212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://adsadadws2[.]pages[.]dev/
•  hxxps://nsvfaeq4-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://nxuyt1[.]pages[.]dev/
•  hxxps://timorotomo[.]top/mikasa/
•  hxxps://windowdefalerts-error0x21908-alert-virus-detected[.]pages[.]dev/
•  hxxps://secure-app19-system[.]pages[.]dev/
•  hxxps://dhjfku7cwbnv1c[.]pages[.]dev/smart89/
•  hxxps://window-csn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://feeding3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://feeding3-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://mcmmanna-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://mcmmanna-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://rs1hgcgbvfghxcg5[.]pages[.]dev/
•  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://seahorse-app-f9gb3[.]ondigitalocean[.]app/
•  hxxps://explreeacszxqusn[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://tuhbkl8-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-8600
•  hxxps://paper-2lx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://watchonlineforfree[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://secure-app16-system[.]pages[.]dev/
•  hxxps://ahstacasfffe77-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://ttilkun-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://ttilkun-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://nature-9az[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://calcium-3kq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://byug7qo8kkkloqibzin4yoibtnoolp4jac[.]pages[.]dev/smart89/
•  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://ghost6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://bgtgggfdt3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://referentmediaxx[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://microsoft-error-pages-check-erros[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://qazaqa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://qazaqa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://jetplane[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://awqqllp66-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://awqqllp66-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://micro-service-alertc0277sb-42123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://class-cpi[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://remote-eqo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://pub-83b6ecec1922429d9d4a51bea400766a[.]r2[.]dev/1060[.]html
•  hxxps://uerj-eup26[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php
•  hxxps://10th3n7c1r9f08061[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://sdgshs01sdfhfkfgfgf[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://bgtgggfdt9[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://11th7p3n9c2f84103[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://edsx-nznop[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
•  hxxps://fkucc2024[.]lovestoblog[.]com/?i=1
•  hxxps://d284puh4b9ulso[.]cloudfront[.]net/wr/?p=(0101)-20899-47181&
•  hxxps://bgtgggfdt98-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://bgtgggfdt98-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
•  hxxps://fgxg56dffg[.]pages[.]dev/
•  hxxps://thankful-field-03f5c4610[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
•  hxxps://car-90r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://hotjpviralsubiftgchszx[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://earth-9dq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://a3326a9217764743a600[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://jsdu83egwjevhsdvaju6fwdjsbajkgewjegdhsadvjhegwyq[.]s3[.]us-east-005[.]backblazeb2[.]com/9193[.]html
•  hxxps://aassxza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://aassxza[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://tauji3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
•  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://nsvfaeq0-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://nsvfaeq0-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://sadswerg34dfvf[.]pages[.]dev/
•  hxxps://choco3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-297-2630
•  hxxps://updatepornseachday[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://remainingaccepted[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://beauty-7tc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://soft-youtiao-80000e[.]netlify[.]app/
•  hxxps://zsae-ocjyt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
•  hxxps://window-75a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://hig6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://hig6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://song-9ja[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://fantasiestriggered[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://hig5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://anhyuiitt[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://umbrella-61s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
•  hxxps://knowngraphicstories[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://bgpadet8lo8q6jfhyl9torgdtht3j1zvtq5l4dodnskoh0[.]pages[.]dev/smart89/
•  hxxps://r1gsdcgsdv36dgvc[.]pages[.]dev/
•  hxxps://secure-app11-system[.]pages[.]dev/
•  hxxps://micasdrosftasd22266[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://nsvfaeq4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://nsvfaeq4[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
•  hxxps://kala098-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
•  hxxps://shungavolumesexscnd[.]z13[.]web[.]core[.]windows[.]net/
•  hxxps://mmaaq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://mmaaq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
•  hxxps://nsvfaeq0[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
•  hxxps://nsvfaeq0[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
•  hxxps://tuhbkl4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-366-5296

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

• If you entered any personal information, change all passwords and alert your bank and credit card companies.
• Enable multi factor authentication to prevent access from attacker.
• If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
• Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
• Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.