2024-11-29 - Tech Support Scam - Phishing Capmapign Observation Alert

66 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 66 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://regadeepxxrd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://electedxtheor[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pug6-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://pug6-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://ghsdcvdghcgh6ffyyyddgdgcdcc[.]pages[.]dev/
  •  hxxps://piyush6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84480-75903
  •  hxxps://postagetechbits[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://testjp555[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dvb22-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dvb22-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://dvb18[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://dvb18[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://23julymicroerror[.]pages[.]dev/
  •  hxxps://aqqssoo91[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://aqqssoo91[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://dartedp0rnoskedy[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://purple-forest-086c13910[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://nomad-name[.]b-cdn[.]net/
  •  hxxps://climatexxtargeted[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aswzztt9[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://aswzztt9[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ajsytttrv[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://ajsytttrv[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://www[.]d282u7qc5gnntu[.]amplifyapp[.]com/
  •  hxxps://askstarxing[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ndw5xvotehflt[.]pages[.]dev/smart89/
  •  hxxps://piyush6[.]z31[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88880-44640
  •  hxxps://zass7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://zass7[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://beyopublishednd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jhdttt1[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=09-70-38-97-37
  •  hxxps://listedp0rnsoht[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://m02amfgnjz8mil5xoy[.]pages[.]dev/smart89/
  •  hxxps://mlxelck9rrpnwf[.]azureedge[.]net/aussie/
  •  hxxps://testjp11[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://ajsytttrv1-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://piyush4[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88861-59081
  •  hxxps://testjp33-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://vorticscalexxity[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://master-pos-12[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://www[.]d15bhcxkgiqcl1[.]amplifyapp[.]com/
  •  hxxps://net-salvix[.]azurewebsites[.]net/Wi0nHelpEthylErr0t067/index[.]html
  •  hxxps://vmxydtyxspjnmmdrv5wgiwa0n4yuqa5fcqhjqsyhsaln3m[.]pages[.]dev/smart89/
  •  hxxps://poiu6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://micro-soft00[.]github[.]io/flag/
  •  hxxps://followquerying[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://javhdscalable[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aswzzttvv[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dvb18-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dfre7[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://polynogitozesmials[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://expanwebprnded[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duu10-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://josvira5[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://josvira5[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://javhftdefined[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://japantest111[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://japantest111[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://existsxoing[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://net-vorlyn[.]azurewebsites[.]net/Wi0nHelpEthylErr0t067/index[.]html
  •  hxxps://ajsytttrv-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://ajsytttrv-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://track3[.]tmc3761[.]com/
  •  hxxps://pug10-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://www[.]d1c4airrsl4dam[.]amplifyapp[.]com/
  •  hxxps://dfre8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://dfre8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://angry-sanderson[.]165-227-44-20[.]plesk[.]page/
  •  hxxps://agreeable-wave-07e730810[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://dsgvuyttss-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://gfdreed1[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://gfdreed1[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://recogquernition[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aystg-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aystg-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://klgnhgubtvw5w9y2tmo[.]pages[.]dev/smart89/
  •  hxxps://getxxsignificant[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rfgty7y[.]pages[.]dev/
  •  hxxps://scribbledapartxx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://javzonep0rn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://testjp555-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://testjp555-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://yooyqpgurwntbztlftohuq114erjuklreohsmvjeqt1jhy[.]pages[.]dev/smart89/
  •  hxxps://sudtrashvaa111[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://sdfghs01dfhfgjgfdds[.]z33[.]web[.]core[.]windows[.]net/sdgdsfgds[.]html
  •  hxxps://trackm56[.]sg-host[.]com/us/wo[.]html?
  •  hxxps://dvb19-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dvb19-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://2204four[.]pages[.]dev/
  •  hxxps://bnmm3-secondary[.]z7[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-888-914-1589
  •  hxxps://missavxminutes[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://piyush3[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84480-75903
  •  hxxps://piyush3[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88880-44640
  •  hxxps://piyush3[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84421-04568
  •  hxxps://piyush3[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88884-87621
  •  hxxps://www[.]dw3lits0x7w32[.]amplifyapp[.]com/
  •  hxxps://fhgjgf19ghgfhjfgdf[.]z33[.]web[.]core[.]windows[.]net/dgdsgg[.]html
  •  hxxps://silly-swirles[.]165-232-187-246[.]plesk[.]page/
  •  hxxps://kyastxmcde[.]pages[.]dev/smart89/
  •  hxxps://zass8-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://frog-8jz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://javviewsvideos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dfre5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://dsgvuytt11-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://8uj9i8miy[.]pages[.]dev/
  •  hxxps://aytftt0aa-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aytftt0aa-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://asjytrv5[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://warftargetedare[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://posedrealizewebsy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qasw9[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://piyush5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88884-87621
  •  hxxps://insertdwrites[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jujilagigu[.]pages[.]dev/win/
  •  hxxps://p0rnsxnumerical[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://auystrrr[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://auystrrr[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://poiu8[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://poiu8[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://securelink32e4518[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://sudtrashvaa-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://jptests12121[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://jptests12121[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dfre5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://dfre5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://grateprofull[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://microsoft-support-help1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gtre[.]shop/
  •  hxxps://resuecomslts[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://piyush7[.]z31[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84480-75903
  •  hxxps://duu5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://duu5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://www[.]d3p6p1yfw4z4my[.]amplifyapp[.]com/
  •  hxxps://poiu8-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://poiu8-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://ammsnndwe-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://ammsnndwe-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://pug9[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://insdtwarfare[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dvb22[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dvb22[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://toolpostman[.]pages[.]dev/
  •  hxxps://aystg5[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://asdd8[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-682-7110
  •  hxxps://pnktmkmohbd[.]z5[.]web[.]core[.]windows[.]net/
  •  hxxps://jltnm7ux9ko[.]pages[.]dev/smart89/
  •  hxxps://qasw6[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://pug9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://pug9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://aqqssoo91-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://aqqssoo91-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://piyush7-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88884-87621
  •  hxxps://piyush7-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88861-59081
  •  hxxps://vrmasterfreehd[.]online/
  •  hxxps://win-alert-computer-support-pop-alert-1818-call-tollfree[.]pages[.]dev/
  •  hxxps://jptests-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://jptests-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://30216548zzlaaaauuussss06[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://qasw8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://qasw8[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-42602
  •  hxxps://entirelyworked[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://testjp990[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://testjp990[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://gfdreed1-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://gfdreed1-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://asgggvvv1133[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://dvb21[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://dvb21[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://qasw6-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://asgggvvv112[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://pug8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://inadequetquate[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://javhdrandoms[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://initopinionial[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dxrtszefcgchbms11[.]pages[.]dev/
  •  hxxps://piyush4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84480-75903
  •  hxxps://piyush4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88880-44640
  •  hxxps://dggfhhgd05dgfhgfd[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://abilityp0rsquickly[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://aystg5-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aystg5-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://piyush5[.]z35[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88861-59081
  •  hxxps://joywithteengirls[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://site-xyntor[.]azurewebsites[.]net/Wi0nHelpEthylErr0t067/index[.]html
  •  hxxps://asdd7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-682-6807
  •  hxxps://ridingubosfrtg[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://eateat2121-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://eateat2121-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://seriesubiosftds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asdd2-secondary[.]z29[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-855-324-1571
  •  hxxps://cheetah-6oc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jnxhsggg02[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://webalongside[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclickcicksto[.]html
  •  hxxps://pug8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://pug8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://trackm53[.]sg-host[.]com/us/wo[.]html
  •  hxxps://track3[.]222dxcz10[.]com/
  •  hxxps://advensxysture[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://partieoscularsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ajsytttrv1[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://ajsytttrv1[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://thomas-dre[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hhuszzpfrtkvq[.]z1[.]web[.]core[.]windows[.]net/
  •  hxxps://javtubeget[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://poiu6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://poiu6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84452-42921
  •  hxxps://www[.]g[.]antisecurecom[.]com/
  •  hxxps://testjp990-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://testjp990-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://zass7-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://zass7-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-42602
  •  hxxps://duu6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://duu6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://dfre7-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://dfre7-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://dfre7-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://pug10[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://pug10[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://javgtfidentical[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://duu5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://asjytrv5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://asjytrv5-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dlkhnsmmvjytg5[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://pug6[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://organziesreformulated[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aswzzttvv-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://aswzzttvv-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://expanwecsxded[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dfre9[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://dfre9[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://asgggvvv112-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://aystg2[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://kqause00mainlink080[.]z13[.]web[.]core[.]windows[.]net/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
  •  hxxps://hardwork[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://track4[.]tmc3774[.]com/
  •  hxxps://jonhas[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dfre8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-42602
  •  hxxps://tech-2ur[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://agreeable-river-0abf61110[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://javhdswexistence[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dvb23-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://aystg[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://broadlyxxwesnk[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://wdgycvghdvghdms1[.]pages[.]dev/
  •  hxxps://minipnomials[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://p0rnseconomists[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://aystg3-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aystg3-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://dvb23[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://putmysho[.]pages[.]dev/
  •  hxxps://targetp0rnbootsw[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jpp0rnenjoyed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jptests[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://jptests[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://dvb21-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dvb21-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://sudtrashvaa111-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://honorsoloary[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qasw10[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://webp0rnrearranged[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://piyush2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88861-59081
  •  hxxps://www[.]dsmogtikcx54u[.]amplifyapp[.]com/
  •  hxxps://www[.]duyx5iak1sp7w[.]amplifyapp[.]com/
  •  hxxps://zass5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://s3[.]ap-northeast-2[.]amazonaws[.]com/5f85ae65[.]34a8[.]5b90[.]8528[.]40cd8f100149/moveagwith[.]html
  •  hxxps://jpteenscompact[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ajhsfcgftef34r34sdc[.]pages[.]dev/folder1/
  •  hxxps://fuiergheguysdms11[.]pages[.]dev/
  •  hxxps://hddimensionalinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gostri-ostra-potte[.]b-cdn[.]net/?QWZNektsUWpOT1RNdTlwRld1SllYbklUR2FEUlZwYVcgYWYvaVJTUWsvb25xT2ptd1FrZ0x4d2xFeFNpM0xaRDRRckE5a09pckIxWWIzVUNGQU9Dck9ZOW9HeGRnWFpIV0cxaGxqYjZTNFl6aHBKdTlseUh2TmwvZVdqalE2UG00WUJ4TGkwdXNGYUVyaXpobTdSdUlZNjhvblpUZUR0aVk=
  •  hxxps://nurielsalo[.]pages[.]dev/win/
  •  hxxps://blue-glacier-0a4641610[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://missavxchesitation[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://warp0rmsodfare[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jp4digitaldreammin01[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=050-5809-5976
  •  hxxps://ofikzastbecol[.]z1[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://peacock-7nq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://99azsdfgacvbnmljkh98132[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://pqoiurty[.]b-cdn[.]net/
  •  hxxps://jnxhsggg02-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://jnxhsggg02-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://kibtsoolazfec[.]z13[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://multiplemensdt[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://dvb19[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dvb19[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://fareisertwell[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://p0rnsverbatim[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://victorious-sky-06d5a9710[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://titleubsifth[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://online-assist[.]live/Microsoft/
  •  hxxps://g[.]antisecurecom[.]com/
  •  hxxps://happy-river-0508d9a10[.]5[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://duu10[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://primaryteensx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://neareswezonst[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://testjp33[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88884-87621
  •  hxxps://sxoexpandedgets[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dsgvuytt11[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dsgvuytt11[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://piyush3-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88861-59081
  •  hxxps://jaapnanm121[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://jaapnanm121[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://missavsxdescribed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://originalsafegitsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eateat2121[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://specclicksdtral[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dfgdfhfdf02hfgjffjfg[.]z33[.]web[.]core[.]windows[.]net/fhggffd[.]html
  •  hxxps://testjp11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://testjp11-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://poiu9[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://poiu9[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://asgggvvv1133-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://sudtrashvaa[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://sudtrashvaa[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://qasw10-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://qasw10-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://poii3[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-520-1635
  •  hxxps://webdigitalhubs03[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-804-631-3864
  •  hxxps://dfghgfhfd18jkghjfghfdgs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fcxcxredfsgtrt[.]z13[.]web[.]core[.]windows[.]net/Wi0n0Err0Sudu0087/index[.]html
  •  hxxps://qasw8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://qasw8-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://jhdttt3-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://jhdttt3-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://virtuosubisdity[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zass8[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://zass8[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aytftt0aa[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aytftt0aa[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://sdtuamaeaquelaursa[.]z7[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc[.]html
  •  hxxps://multiplep0rntc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://statlineared[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jpeternalkeys[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://trackm54[.]sg-host[.]com/us/do[.]html?sid=
  •  hxxps://aswzztt9-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://aswzztt9-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://webp0rninfjpteensxx[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://webp0rngrnsolving[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://piyush2[.]z30[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-84480-75903
  •  hxxps://piyush2[.]z30[.]web[.]core[.]windows[.]net/werrx01ausHTML/?bcda=(0101)-88880-44640
  •  hxxps://projectagent50[.]pages[.]dev/
  •  hxxps://recallp0enosability[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jaapnanm121-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://essaystargetsingu[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclickcicksto[.]html
  •  hxxps://hawkings[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vchdgfhgadfsg[.]z28[.]web[.]core[.]windows[.]net/W0in0sNw0b001Er066/index[.]html
  •  hxxps://accordfigureing[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]d2fw4cv0sjnx6g[.]amplifyapp[.]com/
  •  hxxps://p0rnsetaccording[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://auystrrr-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://auystrrr-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84421-04568
  •  hxxps://dfre9-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-42602
  •  hxxps://m5p7xtotzy8wry[.]pages[.]dev/smart89/
  •  hxxps://poiu9-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://poiu9-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://jptests12121-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://track10[.]222dxcz10[.]com/
  •  hxxps://gffhkhgyykutktk[.]z33[.]web[.]core[.]windows[.]net/Wi0nHelpSpecErr0072/index[.]html
  •  hxxps://zass5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://zass5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://qasw9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://qasw9-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://jhdttt3[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://japantest111-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://javeasierweb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://josvira5-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://bgpadet8lo8q6jfhyl9torgdtht3j1zvtq5l4dodnskoh0[.]pages[.]dev/smart89/
  •  hxxps://analyrndomzed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://v9rfgvbws4repzbpzbwyg1zqcmfm66irmkexormnart[.]pages[.]dev/smart89/
  •  hxxps://duu6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84480-75903
  •  hxxps://duu6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88880-44640
  •  hxxps://testjpiiu7-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88861-59081
  •  hxxps://projectagent49[.]pages[.]dev/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.