2025-04-06 - Tech Support Scam - Phishing Capmapign Observation Alert

86 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 86 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://pillmaxbunches[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://2bt8t1lqr1xu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kidstalesx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://naturemen[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://uulechvot[.]z14[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://d2ghfghghggh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tron3zljbans[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpVi067/index[.]html
  •  hxxps://ianageea[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://music18-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://beddedrepdos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://found11-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-737-5829
  •  hxxps://nupiierinu[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bulecasu[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s5tfduyfyfifuouoi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dibefisuco[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://uuuu15[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://ceiiyioou[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ghum1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://uaielisodu[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://eavuueurw[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tionoofuzi[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nucebema[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cror12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://music16-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://s8hjghgjhgjhgjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wet12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://ziceyeou[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://eugenygraygem[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ropreprubugloglamir[.]traditionalsinte[.]my[.]id/win/index[.]php?vq=vPGJujN2doIHM+m0VhNYlUl4SGhZWjJMTllzTkpSQWEzREJRZ3c9PQ==
  •  hxxps://w7jjunyunyunjyjnyu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tecaxisbudmar[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://music20[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://hexadecimal[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gamelibbowowsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://veyerofabu[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t1bghhhfghgfhvg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f3tfyvyuvyubyuvytvuy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://1003ups7re8esdvdsj2y2b4j[.]z9[.]web[.]core[.]windows[.]net/hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://1003ups7re8esdvdsj2y2b4j[.]z9[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://ruuumaye[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bitmovestube[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eamowhdu[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nutrizebidshub[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cror1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://noyozusune[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://night1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://urchgogaie[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s1ftfduyfygibohjh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://henrym254[.]sg-host[.]com/do/b[.]html
  •  hxxps://spqtwlink01admin039[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://water-e49[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://acrilicklubvet[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tabltedexwear[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://peturemug[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://d7ashsdhjgfghsdffsdfdsf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza23-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://fyuthdh[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-6864-8314
  •  hxxps://s112ghhghghjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza29[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://guficusive[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://mupieeirge[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://eawasiveti[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://music17[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://pavubuwi[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sedeoosi[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://jam121[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://t1srfvewdsvewvwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://broken222-secondary[.]z22[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-877-593-7542
  •  hxxps://wicasivef[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://toyotitul[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sopachoroo[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://vicuwhvano[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://recgepiuy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-858-214-6162
  •  hxxps://mmaildeliver[.]site/s3[.]us-west-2[.]amazonaws[.]com/43f69b40[.]53f5[.]460c[.]84c2[.]8f48b8d2f247[.]usa[.]denied/%26%5e%24%26%40%21%25%24%26%23%26%21%5e%25%25%24%5e%21%24%23%26%5e%21/index%21%23%25%25%24%23%25%5e%26%21%5e%5e%25%5e%24%40%21%26%21%25%21%40%25_3[.]html
  •  hxxps://cartoon5[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7449
  •  hxxps://jomsaspothots[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://su5iuadgciuagsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://adrrtt1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://daar16[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://domain-eo6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://delicuter[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://f2efewgewgewgweg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://yaperavi[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://su1kfyifyifiyfyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://subway-5aw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://knjhbgvfdrsezxdrgvyhu[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://technology-dx2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://r5shgjgashgjgghjagshd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su10souhgosdhs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reitck7[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://seal-app-g6ocz[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1937
  •  hxxps://messer-pdf[.]pages[.]dev/
  •  hxxps://d8asjhsakhsakjhjkahs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://lemon-57c[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oiuytdcvbhnjhgf[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://sdfrgthyjukiu[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://night14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://tish2[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7704
  •  hxxps://bduppdyyy2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-805-294-5932
  •  hxxps://fryseastolsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tish1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://bimworkhortho[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://y13sasdasdasddas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://inckyshortporn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x1ghfhgfhfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su11kufiyfifiyfiu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w7ghgfhghfhgfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://qewsfdgf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://biopayyy2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-1832
  •  hxxps://biopayyy2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://breezupshowviz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://upadat1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://f8fshbsrgdbesge[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://alplll16-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://tesochfiro[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://f13rsgrsgrgrsgrsgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reiogftiu-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://pionovasolo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://optleylinkey[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://optleylinkey[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://optleylinkey[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
  •  hxxps://optleylinkey[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
  •  hxxps://hffhf13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://abdhpoyy1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-844-610-8007
  •  hxxps://music18[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://y3fdgdffdgdgfgdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://exovydiscora[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://s7ashjsahjasjghjsajhsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th7rwsouewguigfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tiluzaieo[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://f5tehrewgbrebre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sports-bc3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://octopus-app-79j6m[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1937
  •  hxxps://eruacovure[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://goldfish-appkjdsjksdjkdsakj-ewoax[.]ondigitalocean[.]app/Wi0nHelpSh0errc0de0890n/index[.]html?phonw=1-844-507-2653&jgj=ed6b1c1a9de4db7a3616ccfbc3405813
  •  hxxps://uebiouaa[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tish2-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://turefiorsi[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ghum1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://yeaisewiw[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sivooofib[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://y6hggsdjgjdgjgdd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://corigeia[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://buopattt1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-844-610-8007
  •  hxxps://giftbowhonenow[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bvgttyyt4-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://upadat14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://oopularoti[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://th6dtfhdrfsds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x6sadasdasdasdsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://newcshg01admin029[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://cror14[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://newmentpayimo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://minibaiesx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://candarytoyduo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w14tdjdjydyjfdkkgjgk[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gasaluyiv[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://rhk44[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-860-374-9975
  •  hxxps://rhk44[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-574-8265
  •  hxxps://rrr15-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://oafumentb[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://watermelon-9t2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fresh16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://litchi-ahi[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://young22-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://revhepiuu2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-866-396-1832
  •  hxxps://headrasdiji[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fresh13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://vutureai[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bugivizez[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t3ssadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza24[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://panubich[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nobbi2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://dupiainovius[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://music17-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://tutut14[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://oooosavure[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://f1wrgvewvewvw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://xc1sadsasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fegevufive[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cror14-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://broken333[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7449
  •  hxxps://qllioillp4[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://runriseshopelfs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://r2gfgdffdgdgfgdfdgf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reitck7-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://daturemen[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://d12asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f4wrgwrgwegwegwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://shbudaor[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s113gjfhgfhfhgfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://erfvehpeii2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-866-396-4984
  •  hxxps://chgaseme[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://binuoaye[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://x10asdasdasddasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fire-9fn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://whfemeie[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://glikirodoc[.]enjoysinte[.]my[.]id/win/index[.]php?vq=QtfbAJTe3akU7ZQrMzsuzjBpN2xwcmZxVFlXcGhDUjVlU1JFWkE9PQ==
  •  hxxps://niiichce[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://twoloblitzs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://urtiaipasi[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tutut16[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://oofations[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bayopattccxxtt2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://gk18fhoi3so8[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t12sahdajsghdjasgdh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://henrym202[.]sg-host[.]com/do/b[.]html
  •  hxxps://pizza27-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://goeacatet[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ropebaeape[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cror13[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://bippayyy1xx[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-844-610-8007
  •  hxxps://daar15-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://tish6[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://bgttttat5-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://reason1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://turedena[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cututureru[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pz52220dx11x[.]z11[.]web[.]core[.]windows[.]net/?zpbid=63019_24b8de88-0e0b-11f0-8afb-981349c3d813
  •  hxxps://1001ihcdcl2y2weraljg2q14[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://lubelure[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://w3sfbesdvbdsvds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rewuuaarga[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://oocalesive[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://skiplersamsam[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://clownfish-app-h9l64[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://ulool4[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://x3ghjagjhgjhaaaa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://oomevaph[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://mgiageiwxonl[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://zauufifir[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://disk-bxv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://whrociyeca[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://z5assdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pumpkin-4yr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fitworkoptinal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rrr11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://fdghs32[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uw3u89rf71237273[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://upadat16[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://r3zsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://seahorse-app-pwqax[.]ondigitalocean[.]app/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-593-8621
  •  hxxps://t10dfbsrfseddsazvd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fgfff1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://oadonuaa[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://w132qegrehreherhe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dositureuu[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://found19[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html
  •  hxxps://r7sadadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cror1[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://mafuzonish[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://speech111-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://d4saasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tish1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://cooonida[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://spedataltish[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t3tdtygfuigyiguou[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w6dsivohduaohv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vuwhlonafi[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://router-5wo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cuwabomu[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://flaxycogosx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eayeiiyug[.]z9[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0061/index[.]html
  •  hxxps://acmeinkamert[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zareduvem[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://gsdfghjfjkretryer[.]z24[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://c1121961013402f9d7334[.]z13[.]web[.]core[.]windows[.]net/?&GLD=cvncnt883o1s7398601g&U=df97b4d2198762d61808f0e2e&C=chasevisa[.]com&I=chasevisa[.]com&G=71[.]1[.]228[.]248&H=&J=
  •  hxxps://vanolaleadrev[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://4ud18rr6q2uj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reitck1-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://nextiktactigo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://neonerafamefan[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mushpooa[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://kitifyanswerds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bedewipe[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bauppayyy2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://y10ghfhgfhggfhfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://phtourzaa[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://neuroexseinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zkmwk28n71114741[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://x7sadsadasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w9uibfiuvgwrywe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reason1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://f7ewouagcfiegqiuc[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://stream-xtx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wutagethr[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://marldskjdajksjkadssad-t9r4l[.]ondigitalocean[.]app/suWihdfhhfhsjhdhvjsh1hdh24/index[.]html?Aniph=1-844-507-2653&jgj=4eb7cdae7b98ae4c01903e08bbeed1bf
  •  hxxps://s111saasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://roworddogcalpo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://book19-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://kcyberglobexo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zuwegurud[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://daar14[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://pizza26-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://tureoouave[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sdsfdfdgds01sdfsd[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-888-844-3189
  •  hxxps://cuponooo[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hyttauuu5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://music19[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://alplll15-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://welllnapsonavia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://xonn5[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1800-298-427
  •  hxxps://young44-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://r8hgjsaghjsahjgsahgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uuzoaadith[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza24-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://w2gdffgddfgdgdgfd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://adquozensity[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hosting-1x5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hyttauuu1[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://arsanuloy[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t4reserserstrsrjnk[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t2gdfgdfdgfdgfdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x1hajsgjagjasg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://riotdg2[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://execuprivamo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tutut16-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://noratureu[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://henrym221[.]sg-host[.]com/do/c[.]html?sid=2025040644&kw=[.]us[.]04[.]desktop[.]windows[.]edge&subid=SUBID
  •  hxxps://leyslabzfabzz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://baypayyyttt2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-4984
  •  hxxps://tish6-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://chnavibe[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://beortame[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hffhf13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://bauppaynttt1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-8206
  •  hxxps://uuferocatu[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://thyaarch[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://accunexinkings[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w4wefgewgwegw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://chfooaou[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://geyezomuda[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://rrr11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://goodsvmsittemptz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mentor-4qn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://lxaogemnwigi[.]z5[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://th14jfyjfyfuifooiug[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rifawagetu[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://vagopidat[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://taaaluzu[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pornmatrialsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fubotuwo[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza26[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://reitck2-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://chuaienal[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bv333[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://trackm332[.]sg-host[.]com/do/b[.]html
  •  hxxps://cefovesion[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://z1sadasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x4sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://regepiui2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-866-396-4984
  •  hxxps://tureeech[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tivephuu[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://vvrpzrz571114652[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://rrr13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7914
  •  hxxps://bokifynaulyt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://th10rgewgfewgewg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vivabetbiscan[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://danioane[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://night15[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://s14ghfghghfghgfbh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://singnleybizpure[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://chillfysipaapps[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mylensezfarinn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://z11sasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su7gyiyufuyfiyfiuuo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bufuwioo[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://upadat13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://baupdyytt2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-1832
  •  hxxps://s3dfhnrfbrsbsrbe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fresh16[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://dmm12-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://wugeurees[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tenecitur[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tutut14-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://turedeiadi[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nunocebif[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://urtiverub[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://urtiverub[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sqcuritb035[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://lawspecpornsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://securedetlslink059[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://dasariguf[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza30[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://yiooirsena[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://d6sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t6uydtududydio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uamazon1-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://techmaster[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vebizacot[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://y14sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eoirwfl3[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://th1wfgvsrgeasge[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://daar12-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://vivofurayo[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ruphluwur[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://urrapeeea[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://x5sadasdasdassdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fetutures[.]z14[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://z12gffgfhhghgfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mirobeur[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://posamuua[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s2ftyfyufiyiiuou[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gfhchgfkjhgkdfhhj[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://new-es3[.]pages[.]dev/
  •  hxxps://th13jyfyfyfiiiuuuifyuf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://school-cmu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cat-45j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://w8jhghjghjghjhjg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tuzeturep[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://tuzeturep[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://urchin-app-6d89c[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://irouyatur[.]z14[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://savasieas[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://isff1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-240-8537
  •  hxxps://th2wrvewfewwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ulool2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://putomaviea[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s4ytfyutfygiygouo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://yedaviti[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hffhf12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://thphcashy[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ormixteleminx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://buiopdtyy2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-866-396-4984
  •  hxxps://ursavefuoa[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://chowhquswhy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uamazon2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://wwproporninfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gedunathg[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://shfovurori[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza29-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://bippspsy2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-805-294-5932
  •  hxxps://sifaturec[.]z33[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://acvbbpauyy2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-866-396-4984
  •  hxxps://upadat12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://th85tehergewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://upadat15-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://uushphdaze[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ersacucogi[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t2wrhbrbgewrgbewwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://adrrtt4[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://rgoidnanosee[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://elevertnuuda[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://satchesinstacv[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dog-i67[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cror13-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://success-a7u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hoquetmeyto[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://y8asdasdasddasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://alplll14[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://phoomesa[.]z1[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0061/index[.]html
  •  hxxps://eoirwfl2-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://tureshzame[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://laouturec[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://found1-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-494-5038[.]
  •  hxxps://daar16-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://luxizpaxoday[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://riygriyrgiuhehurhrehh073-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://y1sadasdasdasdsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tureseraar[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tafadonad[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://foturesoc[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cror15[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://yoaauuii[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tririvimilikac[.]traditionalsinte[.]my[.]id/win/index[.]php?vq=APGv7CKmsWsx9fWkj3tLc0lUTVNuOWgweVU2WXpnbzlQUDlSQ0E9PQ==
  •  hxxps://rrr14-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://ghbvhjyttesrcevdrfghjhgaxcsvdhfbgnb-pdf[.]pages[.]dev/
  •  hxxps://s7rgregegreger[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cimentzazu[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://eameputio[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://w4sadasdasdasdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f12sdfdsvdsvdsvdsvd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://nobbi2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://w10duyddutduduyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://alplll12-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://reitck4[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://bdidodyyy2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-866-396-4984
  •  hxxps://caootemiar[.]z11[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s9hjgjghhjghjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tionbutov[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://sionuesh[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://voeegiurv[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://henrym252[.]sg-host[.]com/do/c[.]html
  •  hxxps://cigesitur[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://inoaggxewmli[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://innovooamifly[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wildsywitwise[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://luveluurs[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t8ersgesrdgvesdve[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://beiayecot[.]z36[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://modelnoxrtiosd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sugarriverdental[.]com/?p=76ebed6101f8faed6f0a884b74855e71&u=deea12b6d00959461646170a1f16505614530a44454b544100591144594844574c550b5d1f065b415f5e105d5c145b424f55125c410a535e53065d41530e02545700105b00
  •  hxxps://y2ssadasdasddasdasdsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tozavuni[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://iceblowsself[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://book19[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://painting-4v7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://found3[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-737-5829
  •  hxxps://fgfff1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://botteqdnalux[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://watch3[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://devoruduf[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://arnuturew[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://z2sddsfsdffsddsfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://siueceeaoa[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://cartoon10-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7449
  •  hxxps://eddxci8[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-240-8537
  •  hxxps://labewasus[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bus77[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-574-8265
  •  hxxps://hffhf12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://music20-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://x12sdffsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://premegicmims[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpjcErr09dhgRTweb/index[.]html
  •  hxxps://d5dfggdgdgdgg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gomirigiga[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://mooothoopu[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://reason13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://tutut1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://qllioillp1[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://riygriyrgiuhehurhrehh002-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://daar13[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://duvozoaan[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://duvozoaan[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://y2jhshgsdjhgsdjhgfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza30-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://cror12-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://uamazon1[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://t7sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vegemegufu[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nuscopeinfos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://s5asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://deshsument[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://urfitoeada[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://music15[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://tish4-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7704
  •  hxxps://pokemon1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://d9sadasfasfasf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://urchin-app-z6wpp[.]ondigitalocean[.]app/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-593-8621
  •  hxxps://paskskkkdkdsksdakdas-nrrh7[.]ondigitalocean[.]app/suWihdfhhfhsjhdhvjsh1hdh24/index[.]html?Aniph=1-844-507-2653&jgj=6aefa76b73f1468e6576218f1fd5bb10
  •  hxxps://fresh17[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://lumenowsymbold[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adsfdd14ssfsfs[.]z24[.]web[.]core[.]windows[.]net/Wpm4XcfT24KE2u9mdr8ixT/index[.]html
  •  hxxps://uuuu13-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://goweooie[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://oarusino[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0061/index[.]html
  •  hxxps://tantrawebbass[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gudeboce[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://gudeboce[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ceyosico[.]z31[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://y13hjggjghjgjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://book18[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://upadat14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://lushorayayshop[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iitebuoa[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ghum14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://tuuuwatio[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://goeabizi[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bahpayyy1[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-858-214-6162
  •  hxxps://vepperardivakozzy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w11rewgrwegwergwr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rajam14-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7704
  •  hxxps://1004twj9r7vecjsp8jcrcdjr[.]z13[.]web[.]core[.]windows[.]net/hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://1004twj9r7vecjsp8jcrcdjr[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://vanessaveraia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x11hgjggjgjgbh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://noiwaglxigme[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://gabocaoasa[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://gabocaoasa[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://zereture[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://zereture[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://yaleveaayo[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://basepodhostx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://velopalluxic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://digital-5fi[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://posteerbyfinds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://project-e0e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://pugoievofi[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hohoho21[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://geiivetima[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid&abc_id=4c9ac1a
  •  hxxps://geiivetima[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pevition[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://r9hgjgjgjhgjgjgjg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://woshmaaie[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://whitffywellnua[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hgfdszexdrcfvgbhj[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://leligosi[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://music19-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://gb645646h3[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://black16[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-7704
  •  hxxps://vetavuirou[.]z28[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://learnynutours[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://timetefifa[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://y4hjgajhgasjghasjghd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y9jhhgjhgjjghjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cfsyim9qyo4v[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uuruaazofa[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://dontdelete01001[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://sqcuritn049[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://elmuptochlywue[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bewepiee[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://browfulllimit[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uuuu1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://y5sadasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sacucodiro[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t11fdasdfafsadasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://boroueoosi[.]z20[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s6dsfsfsdfsdffsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://blizzitsynchup[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://upadat1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://etregdfs01sdss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-535-3178
  •  hxxps://rock55[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-574-8265
  •  hxxps://suaamewi[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hexballfabcast[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mutemecaur[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://development-8nm[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eaturezuy[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://zisiuarota[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://su8hgftgvdtvdvbbr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bossmixtapesd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://henrym238[.]sg-host[.]com/do/c[.]html
  •  hxxps://fresh13[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://fresh1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://t5tftufutfiygiyiou[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s10asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bag-7cd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fresh14[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://th3giygyigiyguo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://disjplsyyy4[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=null
  •  hxxps://d1sadasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w7wgghuvgersuofoew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bontownbiozene[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://z4sdfsdfsdsdfsdfdsf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://stawberry[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://th12rgewrgewgwegw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t8sahgsajdhgasjdhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t4asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://foshtauuva[.]z9[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://fresh17-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://x9sajkhsadhkasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fresh14-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://book18-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://baearafabu[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://disjpdpyy5[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-803-363-4650&_event=ecbe554bdad27274d216b4b98e0640f6
  •  hxxps://pseudocode[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bippayyy1xxcc[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-844-610-8007
  •  hxxps://y1sadasdasdasasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://coaching-cba[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vaxteranimovixo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dofezope[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://yegeyauey[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://daar1-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://trilonuchov[.]traditionalsinte[.]my[.]id/win/index[.]php?vq=1weW/mcAfYfmMAuHhKPp3XBKM3VFZDFnNjFJSm9zMkYyTkdBS2c9PQ==
  •  hxxps://anointadvitum[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cobraaiinfleux[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rainqzources[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://riyenoza[.]z14[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://fsddgf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://stylivopushti[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://feeldaymovoma[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ousavosat[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza21-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://oodatoar[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza28[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://gavucugow[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://enduraalcay[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fresh1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://displksyyy4[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=null
  •  hxxps://microsoft-coral-app-6xv89[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://1004x189e58lcjppk5h3x99j[.]z13[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://rrr12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7914
  •  hxxps://rrr12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://toeapeture[.]z16[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://wagulusiv[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://speech555-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://tutut12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://fresh15-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://blizooskorbsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tiontureu[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tutut12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://sholaneblubukasher[.]traditionalsinte[.]my[.]id/win/index[.]php?vq=U0HquQvE3IEwygSp3lkLw1NxTUV6M1A4bU9LZmJJUXVZUlBVVlE9PQ==
  •  hxxps://tureieiau[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ghcjjgn[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1949
  •  hxxps://dsfdfgdf3r3rsdfsd[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-535-3178
  •  hxxps://vynthzowai[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aidorudo[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://s4ghghfghfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://zubofocu[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://hitginfasdegitsnni[.]z13[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://doxeprezzaaainc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rechepiiiu1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-610-8007
  •  hxxps://100283qgjtn4iwuxwh5ep218[.]z9[.]web[.]core[.]windows[.]net/hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://100283qgjtn4iwuxwh5ep218[.]z9[.]web[.]core[.]windows[.]net//hiWihdfhhfhsjhdhyegshw1/index[.]html?Aniph=null
  •  hxxps://hipfoxnamesai[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f6yfyufyifuogoup[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://javhdselevate[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://su2rsfbvewdsvewdsv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://yeturebo[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://ousoluses[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bypayyy2xxcx[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-4984
  •  hxxps://bypayyy2xxcx[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://growarcgrablab[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://daar12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://reason12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://airtelbelievo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://daar15[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://ceuusowoe[.]z4[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://gogieiwxnalm[.]z5[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://ircawaouy[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tish3-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://su6udghauivgaud[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w6hqjsdahgdfshjdsfhjdsf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://lxxixxl[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-20289-73140
  •  hxxps://cronmbiavrim[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sayecolaminar[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uecilisat[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://payanbhh2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-833-319-7654
  •  hxxps://fesionyini[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://d10ssadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://nacubode[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://wesaeafesi[.]z14[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://th4sdfvwesdvwew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rrr14[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://betaseatkaizr[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://r4sddfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t9fdsdsfsdfdsfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bypayyy2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-4984
  •  hxxps://silver-95q[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tureoozot[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://x2hgghfgfffh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://d3sadasddasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://widunuir[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://fepeniou[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://white-cv8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://adrrrtrtv[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://upadat16-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://ujbp3wna71204165[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://modem-5s0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rosideve[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://su4duigciugadsuo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://daar13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://cror15-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://y12sadasdasdsad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tish5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://puleyuceca[.]z19[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://backupsretinea[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sealdealelvance[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dicavouaph[.]z21[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://su12wegsdfghsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bgttttat1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
  •  hxxps://pizza22-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://rrr15[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://tutut13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://z7gfghgfhfhgfhfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t5gydhgsdhgsdghds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://yeergolu[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://huhjghfgdf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://hffhf1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://uamazon2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://cherry-dg9[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://shisapubgrub[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t8rgewgfewgewgvweg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ziraterufo[.]z5[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://dusineyo[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://rentwincobratvs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://buppdyyy2[.]z13[.]web[.]core[.]windows[.]net/Wi013nh1delpAsm0512/index[.]html?Aniph=1-866-396-4984
  •  hxxps://z8hjggjgjhgjgjg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza28-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://menttion[.]z6[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t6dfsdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w1dffdgfdgfdgdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dsbkdbbjakskjcbsabca[.]pages[.]dev/folder1/
  •  hxxps://vimonime[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://pizza27[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://cellugocmhub[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zoyaootoc[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://wizraydepax[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://z9hkhhkjshjssss[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dt234235235s1[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bus99[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-574-8265
  •  hxxps://taxsexdutyweb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://netsexsongs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://upadat15[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://mamibifeou[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://r1sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pizza22[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-593-8401
  •  hxxps://grey-4fo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hyttauuu-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://x2ghfhfhfhgfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w12utduyyfufgiu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://shboletu[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://uyjngf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
  •  hxxps://watcatrosry[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nzwj3tn4v7nk[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yarosumalo[.]z22[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://t13eytdtfyufiugoggfuj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x3hfhffghgffh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://music13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://w5ashghgsafdhasfd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ljkhbj[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2107
  •  hxxps://hundiaappluxes[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://upadat13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-783-3006
  •  hxxps://zoyaiigi[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://nobbi1-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1948
  •  hxxps://fresh15[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-7782
  •  hxxps://securedetlslink060[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://idsakjlksdalkdslksdlak-zffmf[.]ondigitalocean[.]app/suWihdfhhfhsjhdhvjsh1hdh24/index[.]html?Aniph=1-844-507-2653&jgj=b03df3abbd994c42a42bff9edb328248
  •  hxxps://beuriipos[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://tjsdkdskkdsdsadkasdsad-zacta[.]ondigitalocean[.]app/Wi012nh1delpSh01231/index[.]html?Aniph=1-877-321-4665&jgj=de0f6ac5c2d3286807dd39d975c9b639
  •  hxxps://vuieyazup[.]z38[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://codepydexity[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fresh12-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://invozaphionix[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wecisusu[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://su9yfyfdydyudfuyfu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s6dousgvcuida[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fchgjhk[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-1940
  •  hxxps://t10sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reason13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://whzulucos[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://r6sadsadasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://shfiyuuafi[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://gold-crane-693752[.]hostingersite[.]com/?p=f9be3565e01d17d53b6251f30a73b062&u=b3537223a4a95f464643120e4e16565644560f40144b5241505c1440084842571c500e594e065d410f5b15590d145d421f5017580e4d445e03035845020e04540706135b06
  •  hxxps://1028o6ehjt01zrp6m7604bjb[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=cvlepm3s6sis73blq4v0&sou=234bad19fe45bc2bc579fb2a9&cost=youtube&ip=yutbe[.]com&7=69[.]202[.]191[.]116&8=&9=
  •  hxxps://w2rdtuyfiuguohp[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://hyttauuu1-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1970
  •  hxxps://viunipodika[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fresh12[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-610-4656
  •  hxxps://ortureuul[.]z1[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://bowasionmu[.]z43[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://z3sadassdadasddasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sepeuaii[.]z27[.]web[.]core[.]windows[.]net/Wi061nhelpAbH063/index[.]html?subid=&abc_id=4c9ac1a
  •  hxxps://byteanliftmosx[.]z13[.]web[.]core[.]windows[.]net/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.