55 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 55 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://baullpaayy1[.]z13[.]web[.]core[.]windows[.]net/fiMahdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://x5gfhfhfhfhffhfhf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w5wrshrshsrhrs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://news3[.]inibolatoto[.]info/?utm_medium=paid&utm_source=fb&utm_id=120219818011280598&utm_content=120219896624710598&utm_term=120219861112670598&utm_campaign=120219818011280598&fbclid=IwZXh0bgNhZW0BMABhZGlkAasbW-oD8AYBHar73U9logXJ0aYrUufJxHd-PU0jM3Q2Oqa5cFJywkrzmU1XjzdKHY9dJw_aem_zrC8ut03etOaayTceaBzLw
- hxxps://y5hjgjgjgjgjghjj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fkn979da70166368[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://bauplaynt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-457-9261
- hxxps://bauplaynt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
- hxxps://sqcuritk020[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
- hxxps://glamqumixa[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://bill4jgg[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
- hxxps://bill4jgg[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
- hxxps://myappswet-bkckgve6fkgfcfgp[.]canadacentral-01[.]azurewebsites[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-593-3522
- hxxps://sqcuritz060[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://biynttt1fff22[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://suaryyahh1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-808-371-2057
- hxxps://rest44-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://octopus-app-fqsuu[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://w8ethrehberher[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su1adcvauidcva[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sfdsgsdhs15dfgd[.]z33[.]web[.]core[.]windows[.]net/gyur44gfd[.]html
- hxxps://pcr11[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://clickontop[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://magiqluxwire[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://magiqluxwire[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://uplscale2-pdf[.]pages[.]dev/
- hxxps://loiin10[.]z30[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-888-844-8763
- hxxps://su3rsgfdvasdcas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://youtubexxporn[.]online/
- hxxps://naytozealeo[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://a1has90jxaod[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t10ffbfdsbsdfsg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s3[.]ap-southeast-1[.]amazonaws[.]com/6bh9i[.]0kj8y[.]vgf4r[.]3rg8u[.]6yju9i[.]0kiu6t[.]hgf3w[.]4ty8u[.]8io0o/Win_JPtgu9i[.]5gty6t[.]54dfe3w[.]6yu9i[.]6fr3e[.]2wd55r[.]7uui89u[.]5re32qw[.]3edfg6t/4gquj7[.]0pk8u[.]hg5t[.]fd3w[.]3rt6t[.]6yu8u[.]9iiu7[.]7yy655[.]tt43[.]4re3w[.]4e22w25[.]html
- hxxps://billpayyuu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5539
- hxxps://billpayyuu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
- hxxps://pornunleftr[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://pornunleftr[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://broken2-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://storage[.]googleapis[.]com/twentysixwednesdays/htdocs/index[.]html
- hxxps://t8erhrghreherh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su4ryhshsrfhsfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y2gffgdgfdgdgdgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://core344yrgerfefa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-302-271-1149
- hxxps://crwrfegwerrgwefaea[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-623-900-4498
- hxxps://broken1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://6019gygkz9m6hn3ymplw3a4j[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=cvgn3m10ouhc73amui1g&sou=d7647b51f85ccbe6aa524a374&cost=mazneticlaunch[.]com,mazneticlaunch,com&ip=mazneticlaunch[.]com&7=173[.]47[.]154[.]134&8=&9=
- hxxps://e4fdgdfgdgdgdgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://asfsdgds04r5yege[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3788
- hxxps://fsddsgdss02egrgw[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-623-900-4498
- hxxps://gtuiilll9[.]z8[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1970
- hxxps://w7sajhgasgfdjfasjd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://msms-kgubi[.]ondigitalocean[.]app/
- hxxps://lmx9ol1m70287089[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reccgpei1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
- hxxps://m5hvgyfyjgkghcfgh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://henrym148[.]sg-host[.]com/do/a[.]html
- hxxps://y1ghfghfhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://afssdgdfs01afsfsa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-888-410-9464
- hxxps://ghfcfhg[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
- hxxps://ghfcfhg[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://z8sadasdasdasdassdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://billpywnrtt[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
- hxxps://y6sagjsahgsajghs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x10ghjghghgfhgh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x13dsasdfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t2ewgvewgvewewv[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t12wfeewcfwewe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pllmn6-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://lemocleaners[.]com/amo/lox[.]html?gad_source=5&gclid=EAIaIQobChMItc6rn6yljAMVdgX7Ax3iihcXEAEYASAAEgJcuPD_BwE
- hxxps://famehogshop[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://e6hgfhfghfghfgghfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://doremon17-secondary[.]z30[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-877-337-5499
- hxxps://su75threherhreh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://9012l42qra6d1prv8dk9mqir[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://a6dssdfsdfsddsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://a2c9a8hskdc[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://broken3-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://t6sadasdasdassdasdd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su6uagudcguas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su2fyufyufuyihgy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bill1fkjfdfj5[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
- hxxps://setneiqotrident[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://w7yfuyfuyfyufiyo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ytyr564e65ft[.]z19[.]web[.]core[.]windows[.]net/?gclid=EAIaIQobChMIr_-60I6ZjAMVrIsUCB231gp8EAEYASAAEgItBPD_BwE
- hxxps://fds4wtrtdss45eraa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://broken6[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://x1dfsdfsfsdfsdd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://e9sakhkasfkajgsfkasgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://z2ssadasdasdadads[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://z5sadasddasads[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://a10shjgsgghjsgjhsg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://makinginitiatew[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://bill1jfsjds[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
- hxxps://baillpattty1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-800-934-254
- hxxps://baillpattty1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5539
- hxxps://ababjj1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-457-9261
- hxxps://retyutgrfed[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://t5saasdasddasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://asdsafsagas02eafsaa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://learbynhbweb[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://learbynhbweb[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://e14sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://csdsjkcad22[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1957
- hxxps://t1saasdafasdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fq2wpvmywmgk6v[.]azureedge[.]net/aus/
- hxxps://m16srgrbdhesrhgr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://805xnbfjdnnslavndv[.]pages[.]dev/folder1/
- hxxps://bilppye1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
- hxxps://ujhdshjsdjkasdjkkdjsasad-mxtdz[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=7099b32fc8dc861edd3f14c7a7521a49
- hxxps://ujhdshjsdjkasdjkkdjsasad-mxtdz[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=756c0d65b4f2c681175180457aea2e56
- hxxps://csllsuppnum-f0fkevhag0dac6a3[.]canadacentral-01[.]azurewebsites[.]net/
- hxxps://a3fgddfggfdgfdfgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bhhpttty11[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-806-283-7062
- hxxps://bhhpttty11[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
- hxxps://w106tyjrdhershr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sfseryr6jdgrete4ga[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
- hxxps://w1sddfddfsfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onbv1-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://su8ugiugiugiugo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pitchiekeys[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://3-1myaccountonk9g-fybmg9f6gzd5guhy[.]eastus2-01[.]azurewebsites[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
- hxxps://dd1aa0bb01e91004e4a53[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://antipo[.]online/
- hxxps://protrolubosh[.]freetobyfree[.]my[.]id/win/index[.]php?vq=dxA2aGNbDnN/Edi1SbYOCEpFbkpGWEtweCtMS2h2L285NW5OWEE9PQ==
- hxxps://m6sdfvbsdfvbdsfbdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://e15ghfhfhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w5dfdgdfgdsfsdfsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://vdbfxnc01dvxbx[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://champakraam[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://bill1fdkl[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
- hxxps://pllmn7-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://r6saddsadasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://adasfgsa02eageg[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://billpayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
- hxxps://9028oadkfvr63u99zgdj7ocl[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://t5ethrsgewrge[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://baipaynntt1zzx11[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://baipaynntt1zzx11[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://notionsi[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html
- hxxps://m12sfvdsbvdsvsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x2hgghhjfgfjfjj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sdfrgtyhuiuytre[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://mfortuheeeerd[.]z19[.]web[.]core[.]windows[.]net/winupet/index[.]html
- hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
- hxxps://shlabsxtech[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://r4safasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://04web43rgsssrhsrgs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-208-3750
- hxxps://y14dsfdsfdsfsfddsfdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://wsdxfgyughjb[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://rest44[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://y3sasdsafasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su10dxgdxgdxgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://e13fbggffbfgfbfbff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://broken3[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://r13gfhfhfhhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y8sadadshsdhdshhs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onbv6-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w3iygwuigfcuiewgiofe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y10sadsafasfsafas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://monkfish-app-2-lkqul[.]ondigitalocean[.]app/
- hxxps://vevenafitonyx[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://poij[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1982
- hxxps://adsfsdsd01sfasfa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-903-2753
- hxxps://adsfsdsd01sfasfa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-844-903-2753/
- hxxps://bauplayntttt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://bauplayntttt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
- hxxps://gp5h852i70364191[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://bauppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://bauppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
- hxxps://onbv3-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://skygoladsinfo[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
- hxxps://a2gc8b7ashgxak[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://adassfdggs06qwrffa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://asfasgdgs012sfda[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://mistext2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
- hxxps://paynhhbill1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
- hxxps://m15srghsrhrhrh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t4erfgvrwvwew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t3efiygeywgfiue[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://camplete-pdf[.]pages[.]dev/
- hxxps://dinowebjamx[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://bauppayy2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
- hxxps://6002x1mn95tt5ku5h57b37v8[.]z13[.]web[.]core[.]windows[.]net/Wpm4XcfT24KE2u9mdr8ixT/index[.]html
- hxxps://carrsvonicxque[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://carrsvonicxque[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://bapyyyntt111s[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://bapyyyntt111s[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-831-225-2327
- hxxps://a5sdasfasfafsasff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
- hxxps://clinaxluminezzsx[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://e8ashjgsajgdjasgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://90347aayhfflz80wtbj132ur[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://t75ethrgewgew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://m9fdsbdsbdsbsdb[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onbv2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://rest3-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w143tewsgrhrdshr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://joycasafitkat[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://m3ewsfewfewfew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bahipoolayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-806-283-7062
- hxxps://urchin-app-2-5l6lb[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
- hxxps://y1sfsdfsdfsdfsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y11ssafasfasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://uusxsshhnzhhz665zssx[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(888)-671-1386
- hxxps://denzynaloxsvf[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vigowjobflux[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://x3sadasfasfafasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pllmn7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://sdfrgthyjydthrsg[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://baillpayy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-866-478-6440
- hxxps://baillpayy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://loiin1[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://recvepiij1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-337-5518
- hxxps://reiuyglfk2[.]z14[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1970
- hxxps://reiuyglfk2[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
- hxxps://sqcuritz032[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://onbv2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://displayeddesign[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://loiin7[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
- hxxps://baippaj1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=%28050%29-5050-1982
- hxxps://baippaj1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1982
- hxxps://okltg5zamgye[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://landletsmoors[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://x9hjgjghjhghjgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r11ghjgjgjgjghhjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x6asdasdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t14iyfud7duyfyi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pllmn5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://bauiklpattr1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5539
- hxxps://broken2[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://b49pj6oqc70x[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://babhpaunn1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
- hxxps://babhpaunn1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-877-337-5191
- hxxps://m2rsgewsgwevgvew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://babayjjjk1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
- hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
- hxxps://awbicsleepus[.]z13[.]web[.]core[.]windows[.]net/chrmac/index[.]html
- hxxps://dsjhdjjhbilll1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://z6sadsadasasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r10asdasdassdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su112fszdgdxhxdhdx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://isektgopr[.]z21[.]web[.]core[.]windows[.]net/macforwm/index[.]html
- hxxps://assgdgfs01asfsf[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
- hxxps://assgdgfs01asfsf[.]z13[.]web[.]core[.]windows[.]net/hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
- hxxps://dicbnnartyyy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-808-476-4961
- hxxps://maaaaailaaa[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://coral-app-hnkle[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://t8sadadadadad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t13sdvewdsvdwsv[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t15rwgvrewveww[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://srew437et5ew[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://selloffraofli[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://y13hgjgjghjgjgjgjjh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://barkifyplays[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ac1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-808-476-4961
- hxxps://ac1bill[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://onbv5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w6rgwergewgew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w3ghfghfhfhfghbh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w6saasfassdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t3fghgfhfghhf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://baipaynntt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://mentagocorvexaz[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://mentagocorvexaz[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
- hxxps://huijyf[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
- hxxps://x11adsasdasdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://assagsdga01wsfsfa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://t4fgdfgdgddggdgdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://terestaxes[.]in/W0indbnAmd07w0in820/index[.]html
- hxxps://trecjpijp[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-866-478-6440
- hxxps://chalbelavdu[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://core35trggrh34ffw[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=0101-833-824-1885
- hxxps://vodasakevo[.]centuan[.]shop/win/index[.]php?vq=BD1Z0aQ+ZLNze1Rf54F5OG1sVVk4STNBVUFXZDRYYzVtK3Vlc3c9PQ==
- hxxps://a7jhgjgjgjgdsjsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x5dsfsfgsgsffgdh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pythiaartsia[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://z4sadasdaddasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://poanti[.]online/
- hxxps://a4ssaffasfasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://henrym154[.]sg-host[.]com/do/b[.]html
- hxxps://poiuytresdxcv[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://z1asddasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x84su8y170538216[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://onbv1[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://alq4m86pxftk[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://billllinghhh1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
- hxxps://q3hfk8fl2y48[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://t9redhrdfhdrhrh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://asfsdgds03asfaa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=(0101)-81646-53312
- hxxps://e11fdgfdgfdfgdgdg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onbv6[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://biynttt1fff[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://t1rrsgbewfvaefve[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r12sadsadasdasddas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onlinepaynettt1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
- hxxps://nq655i5p70164483[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://t11ygfuyfuyfiygfi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r9dfgdfgdfgdfdffg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://billapyggg1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
- hxxps://adsagdsa01asafa[.]z22[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://m7fgvwrvfewewvw[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x1sasdasdassdassd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://paybonemm1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-808-476-4961
- hxxps://m13srgffesfsefwef[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://urchin-app-z8oy4[.]ondigitalocean[.]app/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
- hxxps://sfdsgdds01sfgas[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-208-3750
- hxxps://henrym189[.]sg-host[.]com/do/a[.]html
- hxxps://broken1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://rauzievozip[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://jellyfish-app-3-xd5rh[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
- hxxps://m1kufyudfutduyfi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x12sadsadassdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r7sdasfasfasfafasa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://king-prawn-app-inx4t[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://a9sdsfdsfdsfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://zamrotantra[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://baillaptyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://r1asdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://yusdjhjhdsjdsjksadasd-mdkaf[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897
- hxxps://rhhjsddskjjkdsjksdjksdjkds-silo6[.]ondigitalocean[.]app/Wi0nHelpSh0errc0de0890n/index[.]html?phonw=1-877-940-4897&jgj=64d70c164da015fcef130b97c28c1573
- hxxps://x4jhgjgjhgjgjhgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w2wrhteherhewhw[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://onlinepaynet1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-808-476-4961
- hxxps://w1ytfuyfyufyfiugo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://finatekgetlore[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
- hxxps://bollwer-pdf[.]pages[.]dev/
- hxxps://kiglaglishiloke[.]their[.]my[.]id/win/index[.]php?vq=JOJX+g7tfQAKKFd6pKACp3hDL3BMYmg3eENGRUdDUG5hc3plSkE9PQ==
- hxxps://rest3[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w8sadasfasfasadasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su4rshbdbsdbdsbds[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://thebytechyx[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://thebytechyx[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://m14ydtudtufuyfuii[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sfgsfdgs20sdgdss[.]z13[.]web[.]core[.]windows[.]net/srwegd4d[.]html
- hxxps://sfsdgdsffdsgf01fsdas[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://e2asdasdasdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://branddigitalset[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://branddigitalset[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://z7asdadadasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su9owdsgciugeduiac[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://grubzielobby[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sea-turtle-app-w62ir[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://r3hjgghjghjgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x2asdasdasdasda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://webkidzoom[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://baillpayyu2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-806-283-7062
- hxxps://regpeiiiio1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-8509
- hxxps://winosecurity[.]pages[.]dev/
- hxxps://t2sadasdasdadasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://broken4-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://billapaynettt1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://broken4[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://y2dsadsadsadsa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t6reresererxerxre[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://broken6-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w2ghgfhffhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sadfadsfgdgd0q34q[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3164
- hxxps://flufullaptcall[.]z13[.]web[.]core[.]windows[.]net/owhatalookwhatagracetenuhikaraanmainchasewhatanakshwhatanaindilterahogayafanwhatasmilewhatastyleluttineendokiyefile/chrm/index[.]html
- hxxps://oyster-app-h347a[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://fsdgrgs3wyhrafwqrqa[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-863-888-3896
- hxxps://tr86hy799hht898gre678[.]z20[.]web[.]core[.]windows[.]net/facebook-com-alert/index[.]html?call=%201-833-319-4607
- hxxps://baupaaccc1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
- hxxps://w11tdhrdsfghsrhg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://capulemeloda[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://e3sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r8asfsasfasfafaff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://su5etdhdrhfjdj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://securityalerts55ersd30w[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0ShA52/index6f36[.]html?Anph=1-877-419-5016
- hxxps://w13rtjhdtgjdtjtj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://m4ydysytduiujfj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://asccxvvacvv1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-833-319-7654
- hxxps://asccxvvacvv1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-865-249-3502
- hxxps://goldfish-app-yplgc[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
- hxxps://atranohexques[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://adfdsgdds03egeger[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-575-8129
- hxxps://streamingbeathdaxc[.]z9[.]web[.]core[.]windows[.]net/
- hxxps://tidybeesofia[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ohho5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-9561
- hxxps://loiin1-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://z3gffhfgfgfhfhffh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ecfi[.]edu[.]co/?p=ee305d8bb7350f552963904d46cdcbdd&u=72fdc564ef4d0b414244165c1b4b025140510b1241160646545b10125d15165018570a0b1b5b09460b5c110b584905471b5713015d07150007045c17575350514305001653
- hxxps://seashell-app-utvil[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9584
- hxxps://indtallcomiex[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://indtallcomiex[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
- hxxps://a8jhjdsjjdhjshd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://017ww025mar[.]z9[.]web[.]core[.]windows[.]net/Wpm4XcfT24KE2u9mdr8ixT/index[.]html
- hxxps://x8hggjghjghjhjhgjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ujdksfjkfdjkksdjksdfk-d34x9[.]ondigitalocean[.]app/Wi013nh1delpAsm051227/index[.]html?Aniph=1-877-940-4897&jgj=b60257757f9b1236674db40993073f93
- hxxps://zenunapruned[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
- hxxps://zenunapruned[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://babaynbh1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-5191
- hxxps://tronxklams54e[.]z13[.]web[.]core[.]windows[.]net/?_event=060a4f9cce8a29480610d2cbf8ef90d9&click_id=2isqsgbfbm8sz6xeq&tid=701&subid=celestialroblox[.]com&ref=celestialroblox[.]com&969
- hxxps://biuoppayyy1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-833-319-7654
- hxxps://e12sdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bahhynaness1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
- hxxps://bahhynaness1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-865-249-3502
- hxxps://w4gffgdfgdfgdfgdgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://r2hgjhgjgjgjghjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://levoshuni[.]domikdoma[.]my[.]id/win/index[.]php?vq=1kD2CxZDQ/YY+FWciWbHp2lBMU4wWU5YcDYycU9icXUxWlpjcEE9PQ==
- hxxps://asder3refs01sfs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-465-3312
- hxxps://uytreazfdxgchv[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://seall12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-337-6319
- hxxps://onbv5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8307
- hxxps://w12rjtrdhertjhreger[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y12jksajdhaskfjhaksf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w4dtufyiygiygiijgu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://henrym161[.]sg-host[.]com/do/a[.]html?
- hxxps://mindagoladria[.]z13[.]web[.]core[.]windows[.]net/macx/index[.]html
- hxxps://mindagoladria[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
- hxxps://y4gghghhgghgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://creationaltersx[.]z13[.]web[.]core[.]windows[.]net/
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.