2025-03-29 - Tech Support Scam - Phishing Capmapign Observation Alert

55 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 55 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://baullpaayy1[.]z13[.]web[.]core[.]windows[.]net/fiMahdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://x5gfhfhfhfhffhfhf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w5wrshrshsrhrs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://news3[.]inibolatoto[.]info/?utm_medium=paid&utm_source=fb&utm_id=120219818011280598&utm_content=120219896624710598&utm_term=120219861112670598&utm_campaign=120219818011280598&fbclid=IwZXh0bgNhZW0BMABhZGlkAasbW-oD8AYBHar73U9logXJ0aYrUufJxHd-PU0jM3Q2Oqa5cFJywkrzmU1XjzdKHY9dJw_aem_zrC8ut03etOaayTceaBzLw
  •  hxxps://y5hjgjgjgjgjghjj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fkn979da70166368[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://bauplaynt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-457-9261
  •  hxxps://bauplaynt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
  •  hxxps://sqcuritk020[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://bill4jgg[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://bill4jgg[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
  •  hxxps://myappswet-bkckgve6fkgfcfgp[.]canadacentral-01[.]azurewebsites[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-593-3522
  •  hxxps://sqcuritz060[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://biynttt1fff22[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://suaryyahh1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-808-371-2057
  •  hxxps://rest44-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://octopus-app-fqsuu[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://w8ethrehberher[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su1adcvauidcva[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sfdsgsdhs15dfgd[.]z33[.]web[.]core[.]windows[.]net/gyur44gfd[.]html
  •  hxxps://pcr11[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://clickontop[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://magiqluxwire[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://magiqluxwire[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://uplscale2-pdf[.]pages[.]dev/
  •  hxxps://loiin10[.]z30[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-888-844-8763
  •  hxxps://su3rsgfdvasdcas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://youtubexxporn[.]online/
  •  hxxps://naytozealeo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://a1has90jxaod[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t10ffbfdsbsdfsg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s3[.]ap-southeast-1[.]amazonaws[.]com/6bh9i[.]0kj8y[.]vgf4r[.]3rg8u[.]6yju9i[.]0kiu6t[.]hgf3w[.]4ty8u[.]8io0o/Win_JPtgu9i[.]5gty6t[.]54dfe3w[.]6yu9i[.]6fr3e[.]2wd55r[.]7uui89u[.]5re32qw[.]3edfg6t/4gquj7[.]0pk8u[.]hg5t[.]fd3w[.]3rt6t[.]6yu8u[.]9iiu7[.]7yy655[.]tt43[.]4re3w[.]4e22w25[.]html
  •  hxxps://billpayyuu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5539
  •  hxxps://billpayyuu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
  •  hxxps://pornunleftr[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://pornunleftr[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://broken2-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://storage[.]googleapis[.]com/twentysixwednesdays/htdocs/index[.]html
  •  hxxps://t8erhrghreherh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su4ryhshsrfhsfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y2gffgdgfdgdgdgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://core344yrgerfefa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-302-271-1149
  •  hxxps://crwrfegwerrgwefaea[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-623-900-4498
  •  hxxps://broken1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://6019gygkz9m6hn3ymplw3a4j[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=cvgn3m10ouhc73amui1g&sou=d7647b51f85ccbe6aa524a374&cost=mazneticlaunch[.]com,mazneticlaunch,com&ip=mazneticlaunch[.]com&7=173[.]47[.]154[.]134&8=&9=
  •  hxxps://e4fdgdfgdgdgdgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://asfsdgds04r5yege[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3788
  •  hxxps://fsddsgdss02egrgw[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-623-900-4498
  •  hxxps://gtuiilll9[.]z8[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1970
  •  hxxps://w7sajhgasgfdjfasjd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://msms-kgubi[.]ondigitalocean[.]app/
  •  hxxps://lmx9ol1m70287089[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reccgpei1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
  •  hxxps://m5hvgyfyjgkghcfgh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://henrym148[.]sg-host[.]com/do/a[.]html
  •  hxxps://y1ghfghfhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://afssdgdfs01afsfsa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-888-410-9464
  •  hxxps://ghfcfhg[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
  •  hxxps://ghfcfhg[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://z8sadasdasdasdassdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://billpywnrtt[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
  •  hxxps://y6sagjsahgsajghs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x10ghjghghgfhgh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x13dsasdfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t2ewgvewgvewewv[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t12wfeewcfwewe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pllmn6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://lemocleaners[.]com/amo/lox[.]html?gad_source=5&gclid=EAIaIQobChMItc6rn6yljAMVdgX7Ax3iihcXEAEYASAAEgJcuPD_BwE
  •  hxxps://famehogshop[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://e6hgfhfghfghfgghfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://doremon17-secondary[.]z30[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-877-337-5499
  •  hxxps://su75threherhreh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://9012l42qra6d1prv8dk9mqir[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://a6dssdfsdfsddsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://a2c9a8hskdc[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://broken3-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://t6sadasdasdassdasdd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su6uagudcguas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su2fyufyufuyihgy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bill1fkjfdfj5[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
  •  hxxps://setneiqotrident[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w7yfuyfuyfyufiyo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ytyr564e65ft[.]z19[.]web[.]core[.]windows[.]net/?gclid=EAIaIQobChMIr_-60I6ZjAMVrIsUCB231gp8EAEYASAAEgItBPD_BwE
  •  hxxps://fds4wtrtdss45eraa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://broken6[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://x1dfsdfsfsdfsdd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://e9sakhkasfkajgsfkasgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z2ssadasdasdadads[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z5sadasddasads[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://a10shjgsgghjsgjhsg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://makinginitiatew[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bill1jfsjds[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
  •  hxxps://baillpattty1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-800-934-254
  •  hxxps://baillpattty1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
  •  hxxps://ababjj1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-457-9261
  •  hxxps://retyutgrfed[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://t5saasdasddasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://asdsafsagas02eafsaa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://learbynhbweb[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://learbynhbweb[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://e14sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://csdsjkcad22[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1957
  •  hxxps://t1saasdafasdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fq2wpvmywmgk6v[.]azureedge[.]net/aus/
  •  hxxps://m16srgrbdhesrhgr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://805xnbfjdnnslavndv[.]pages[.]dev/folder1/
  •  hxxps://bilppye1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
  •  hxxps://ujhdshjsdjkasdjkkdjsasad-mxtdz[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=7099b32fc8dc861edd3f14c7a7521a49
  •  hxxps://ujhdshjsdjkasdjkkdjsasad-mxtdz[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=756c0d65b4f2c681175180457aea2e56
  •  hxxps://csllsuppnum-f0fkevhag0dac6a3[.]canadacentral-01[.]azurewebsites[.]net/
  •  hxxps://a3fgddfggfdgfdfgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bhhpttty11[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-806-283-7062
  •  hxxps://bhhpttty11[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
  •  hxxps://w106tyjrdhershr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sfseryr6jdgrete4ga[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://w1sddfddfsfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onbv1-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://su8ugiugiugiugo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pitchiekeys[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://3-1myaccountonk9g-fybmg9f6gzd5guhy[.]eastus2-01[.]azurewebsites[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://dd1aa0bb01e91004e4a53[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://antipo[.]online/
  •  hxxps://protrolubosh[.]freetobyfree[.]my[.]id/win/index[.]php?vq=dxA2aGNbDnN/Edi1SbYOCEpFbkpGWEtweCtMS2h2L285NW5OWEE9PQ==
  •  hxxps://m6sdfvbsdfvbdsfbdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://e15ghfhfhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w5dfdgdfgdsfsdfsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vdbfxnc01dvxbx[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://champakraam[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://bill1fdkl[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
  •  hxxps://pllmn7-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://r6saddsadasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://adasfgsa02eageg[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://billpayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
  •  hxxps://9028oadkfvr63u99zgdj7ocl[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t5ethrsgewrge[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://baipaynntt1zzx11[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://baipaynntt1zzx11[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://notionsi[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html
  •  hxxps://m12sfvdsbvdsvsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x2hgghhjfgfjfjj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sdfrgtyhuiuytre[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://mfortuheeeerd[.]z19[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://r4safasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://04web43rgsssrhsrgs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-208-3750
  •  hxxps://y14dsfdsfdsfsfddsfdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wsdxfgyughjb[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rest44[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://y3sasdsafasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su10dxgdxgdxgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://e13fbggffbfgfbfbff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://broken3[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://r13gfhfhfhhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y8sadadshsdhdshhs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onbv6-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w3iygwuigfcuiewgiofe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y10sadsafasfsafas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://monkfish-app-2-lkqul[.]ondigitalocean[.]app/
  •  hxxps://vevenafitonyx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://poij[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1982
  •  hxxps://adsfsdsd01sfasfa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-903-2753
  •  hxxps://adsfsdsd01sfasfa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-903-2753/
  •  hxxps://bauplayntttt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://bauplayntttt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
  •  hxxps://gp5h852i70364191[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://bauppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://bauppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
  •  hxxps://onbv3-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://skygoladsinfo[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://a2gc8b7ashgxak[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://adassfdggs06qwrffa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://asfasgdgs012sfda[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://mistext2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
  •  hxxps://paynhhbill1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
  •  hxxps://m15srghsrhrhrh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t4erfgvrwvwew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t3efiygeywgfiue[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://camplete-pdf[.]pages[.]dev/
  •  hxxps://dinowebjamx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bauppayy2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
  •  hxxps://6002x1mn95tt5ku5h57b37v8[.]z13[.]web[.]core[.]windows[.]net/Wpm4XcfT24KE2u9mdr8ixT/index[.]html
  •  hxxps://carrsvonicxque[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://carrsvonicxque[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://bapyyyntt111s[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://bapyyyntt111s[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
  •  hxxps://a5sdasfasfafsasff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://e8ashjgsajgdjasgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://90347aayhfflz80wtbj132ur[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t75ethrgewgew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m9fdsbdsbdsbsdb[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onbv2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://rest3-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w143tewsgrhrdshr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://joycasafitkat[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://m3ewsfewfewfew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bahipoolayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
  •  hxxps://urchin-app-2-5l6lb[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
  •  hxxps://y1sfsdfsdfsdfsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y11ssafasfasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uusxsshhnzhhz665zssx[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(888)-671-1386
  •  hxxps://denzynaloxsvf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vigowjobflux[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x3sadasfasfafasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pllmn7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://sdfrgthyjydthrsg[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://baillpayy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-866-478-6440
  •  hxxps://baillpayy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://loiin1[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://recvepiij1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-337-5518
  •  hxxps://reiuyglfk2[.]z14[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1970
  •  hxxps://reiuyglfk2[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://sqcuritz032[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://onbv2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://displayeddesign[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://loiin7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
  •  hxxps://baippaj1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=%28050%29-5050-1982
  •  hxxps://baippaj1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1982
  •  hxxps://okltg5zamgye[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://landletsmoors[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x9hjgjghjhghjgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r11ghjgjgjgjghhjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x6asdasdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t14iyfud7duyfyi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pllmn5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://bauiklpattr1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5539
  •  hxxps://broken2[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://b49pj6oqc70x[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://babhpaunn1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://babhpaunn1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
  •  hxxps://m2rsgewsgwevgvew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://babayjjjk1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
  •  hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
  •  hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/chrmac/index[.]html
  •  hxxps://dsjhdjjhbilll1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://z6sadsadasasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r10asdasdassdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su112fszdgdxhxdhdx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://isektgopr[.]z21[.]web[.]core[.]windows[.]net/macforwm/index[.]html
  •  hxxps://assgdgfs01asfsf[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://assgdgfs01asfsf[.]z13[.]web[.]core[.]windows[.]net/hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://dicbnnartyyy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-808-476-4961
  •  hxxps://maaaaailaaa[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://coral-app-hnkle[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://t8sadadadadad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t13sdvewdsvdwsv[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t15rwgvrewveww[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://srew437et5ew[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://selloffraofli[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://y13hgjgjghjgjgjgjjh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://barkifyplays[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ac1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
  •  hxxps://ac1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://onbv5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w6rgwergewgew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w3ghfghfhfhfghbh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w6saasfassdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t3fghgfhfghhf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://baipaynntt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://mentagocorvexaz[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://mentagocorvexaz[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
  •  hxxps://huijyf[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
  •  hxxps://x11adsasdasdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://assagsdga01wsfsfa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://t4fgdfgdgddggdgdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://terestaxes[.]in/W0indbnAmd07w0in820/index[.]html
  •  hxxps://trecjpijp[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-866-478-6440
  •  hxxps://chalbelavdu[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://core35trggrh34ffw[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=0101-833-824-1885
  •  hxxps://vodasakevo[.]centuan[.]shop/win/index[.]php?vq=BD1Z0aQ+ZLNze1Rf54F5OG1sVVk4STNBVUFXZDRYYzVtK3Vlc3c9PQ==
  •  hxxps://a7jhgjgjgjgdsjsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x5dsfsfgsgsffgdh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pythiaartsia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://z4sadasdaddasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://poanti[.]online/
  •  hxxps://a4ssaffasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://henrym154[.]sg-host[.]com/do/b[.]html
  •  hxxps://poiuytresdxcv[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://z1asddasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x84su8y170538216[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://onbv1[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://alq4m86pxftk[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://billllinghhh1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
  •  hxxps://q3hfk8fl2y48[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://t9redhrdfhdrhrh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://asfsdgds03asfaa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=(0101)-81646-53312
  •  hxxps://e11fdgfdgfdfgdgdg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onbv6[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://biynttt1fff[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://t1rrsgbewfvaefve[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r12sadsadasdasddas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onlinepaynettt1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
  •  hxxps://nq655i5p70164483[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://t11ygfuyfuyfiygfi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r9dfgdfgdfgdfdffg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://billapyggg1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
  •  hxxps://adsagdsa01asafa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://m7fgvwrvfewewvw[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x1sasdasdassdassd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://paybonemm1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
  •  hxxps://m13srgffesfsefwef[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://urchin-app-z8oy4[.]ondigitalocean[.]app/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
  •  hxxps://sfdsgdds01sfgas[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-208-3750
  •  hxxps://henrym189[.]sg-host[.]com/do/a[.]html
  •  hxxps://broken1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://rauzievozip[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jellyfish-app-3-xd5rh[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
  •  hxxps://m1kufyudfutduyfi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x12sadsadassdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r7sdasfasfasfafasa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://king-prawn-app-inx4t[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://a9sdsfdsfdsfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://zamrotantra[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://baillaptyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://r1asdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://yusdjhjhdsjdsjksadasd-mdkaf[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897
  •  hxxps://rhhjsddskjjkdsjksdjksdjkds-silo6[.]ondigitalocean[.]app/Wi0nHelpSh0errc0de0890n/index[.]html?phonw=1-877-940-4897&jgj=64d70c164da015fcef130b97c28c1573
  •  hxxps://x4jhgjgjhgjgjhgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w2wrhteherhewhw[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://onlinepaynet1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
  •  hxxps://w1ytfuyfyufyfiugo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://bollwer-pdf[.]pages[.]dev/
  •  hxxps://kiglaglishiloke[.]their[.]my[.]id/win/index[.]php?vq=JOJX+g7tfQAKKFd6pKACp3hDL3BMYmg3eENGRUdDUG5hc3plSkE9PQ==
  •  hxxps://rest3[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w8sadasfasfasadasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su4rshbdbsdbdsbds[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://thebytechyx[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://thebytechyx[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://m14ydtudtufuyfuii[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sfgsfdgs20sdgdss[.]z13[.]web[.]core[.]windows[.]net/srwegd4d[.]html
  •  hxxps://sfsdgdsffdsgf01fsdas[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://e2asdasdasdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://branddigitalset[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://branddigitalset[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://z7asdadadasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su9owdsgciugeduiac[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://grubzielobby[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sea-turtle-app-w62ir[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://r3hjgghjghjgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x2asdasdasdasda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://webkidzoom[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://baillpayyu2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-806-283-7062
  •  hxxps://regpeiiiio1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
  •  hxxps://winosecurity[.]pages[.]dev/
  •  hxxps://t2sadasdasdadasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://broken4-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://billapaynettt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://broken4[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://y2dsadsadsadsa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t6reresererxerxre[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://broken6-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w2ghgfhffhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sadfadsfgdgd0q34q[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3164
  •  hxxps://flufullaptcall[.]z13[.]web[.]core[.]windows[.]net/owhatalookwhatagracetenuhikaraanmainchasewhatanakshwhatanaindilterahogayafanwhatasmilewhatastyleluttineendokiyefile/chrm/index[.]html
  •  hxxps://oyster-app-h347a[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://fsdgrgs3wyhrafwqrqa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3896
  •  hxxps://tr86hy799hht898gre678[.]z20[.]web[.]core[.]windows[.]net/facebook-com-alert/index[.]html?call=%201-833-319-4607
  •  hxxps://baupaaccc1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
  •  hxxps://w11tdhrdsfghsrhg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://capulemeloda[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://e3sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r8asfsasfasfafaff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su5etdhdrhfjdj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://securityalerts55ersd30w[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index6f36[.]html?Anph=1-877-419-5016
  •  hxxps://w13rtjhdtgjdtjtj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m4ydysytduiujfj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://asccxvvacvv1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
  •  hxxps://asccxvvacvv1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
  •  hxxps://goldfish-app-yplgc[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://atranohexques[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adfdsgdds03egeger[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-575-8129
  •  hxxps://streamingbeathdaxc[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://tidybeesofia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ohho5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
  •  hxxps://loiin1-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://z3gffhfgfgfhfhffh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ecfi[.]edu[.]co/?p=ee305d8bb7350f552963904d46cdcbdd&u=72fdc564ef4d0b414244165c1b4b025140510b1241160646545b10125d15165018570a0b1b5b09460b5c110b584905471b5713015d07150007045c17575350514305001653
  •  hxxps://seashell-app-utvil[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
  •  hxxps://indtallcomiex[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://indtallcomiex[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://a8jhjdsjjdhjshd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://017ww025mar[.]z9[.]web[.]core[.]windows[.]net/Wpm4XcfT24KE2u9mdr8ixT/index[.]html
  •  hxxps://x8hggjghjghjhjhgjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ujdksfjkfdjkksdjksdfk-d34x9[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=b60257757f9b1236674db40993073f93
  •  hxxps://zenunapruned[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://zenunapruned[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://babaynbh1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
  •  hxxps://tronxklams54e[.]z13[.]web[.]core[.]windows[.]net/?_event=060a4f9cce8a29480610d2cbf8ef90d9&click_id=2isqsgbfbm8sz6xeq&tid=701&subid=celestialroblox[.]com&ref=celestialroblox[.]com&969
  •  hxxps://biuoppayyy1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-833-319-7654
  •  hxxps://e12sdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bahhynaness1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://bahhynaness1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-865-249-3502
  •  hxxps://w4gffgdfgdfgdfgdgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r2hgjhgjgjgjghjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://levoshuni[.]domikdoma[.]my[.]id/win/index[.]php?vq=1kD2CxZDQ/YY+FWciWbHp2lBMU4wWU5YcDYycU9icXUxWlpjcEE9PQ==
  •  hxxps://asder3refs01sfs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
  •  hxxps://uytreazfdxgchv[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://seall12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-337-6319
  •  hxxps://onbv5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
  •  hxxps://w12rjtrdhertjhreger[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y12jksajdhaskfjhaksf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w4dtufyiygiygiijgu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://henrym161[.]sg-host[.]com/do/a[.]html?
  •  hxxps://mindagoladria[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
  •  hxxps://mindagoladria[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://y4gghghhgghgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://creationaltersx[.]z13[.]web[.]core[.]windows[.]net/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.