2025-04-23 - Tech Support Scam - Phishing Capmapign Observation Alert

54 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 54 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

hxxps://eddffcv26-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://joney2[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://vyie23-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://cnmj14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://lood13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://mchin11[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://deeq11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://cleaverswiftsoul[.]z13[.]web[.]core[.]windows[.]net/
hxxps://bnjj22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dfd21-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fassing6-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://hyttty1-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://parle18[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://lightstarorganiser[.]z13[.]web[.]core[.]windows[.]net/
hxxps://deeq14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://d3hfghfghgfhfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://d6ghjgjgjgjgjnjb[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://augustgvmj8[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f281mlm9ljxc9t&tid=6&subid=software-architect[.]net&ref=software-architect[.]net&2
hxxps://calendar-1w0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://augusfv43ws8[.]z13[.]web[.]core[.]windows[.]net/media/ados[.]mp3
hxxps://freger19-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://morddolaun[.]pages[.]dev/
hxxps://cnmj12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://hyttty4[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://gfhe13[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://gfhe13[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bhhubhj[.]onrender[.]com/
hxxps://deploaysiotes[.]pages[.]dev/
hxxps://yy3ghfhfhfghfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://mjgg12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://bauplonlinnehj2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://baolayyo2wjhjk[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://jukd12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://ziddizaddi[.]pages[.]dev/
hxxps://news5[.]universaldesign[.]info/?utm_medium=paid&utm_source=fb&utm_id=120218391752710472&utm_content=120220237906850472&utm_term=120218526663880472&utm_campaign=120218391752710472&fbclid=IwZXh0bgNhZW0BMABhZGlkAasbq2FPY5gBHndAyOKuCqjfTZ99nGxhvpTnKCDtDVWOkHTx8yVYLInEtCzFLMA008FFFE8O_aem_vCSRr8knUK2oTnOGrXj8mg
hxxps://projectssa[.]pages[.]dev/
hxxps://onkpayhbill1cx[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9823
hxxps://afdshfsdhfi984w98u8942g2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpeReSarrc0de20/index[.]html
hxxps://coral-app-bb5dd[.]ondigitalocean[.]app/Ma0cHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2182
hxxps://m6erhewbsgwegwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://secureliaapphislpsa0011[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://bdnd11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://gfhe15-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://mjus16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://dfas12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://mouse-3ys[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://asjuttt[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://mjus16[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://pdfcurating[.]pages[.]dev/
hxxps://udee12-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://joney3[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://egfous2-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://yeew12[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://yeew12[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://asttssll[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://pendrive-bhu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://asttssll-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://d7dfsdsfsdfdsfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://snow-dp4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://gfhe11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://gfhe11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://vgyt11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://th1wedsveacqwc[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://sand-3ru[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://vhjvgvkhvj[.]z11[.]web[.]core[.]windows[.]net/
hxxps://asgttta2-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://rrs16[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfd22-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://gfhe14[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://gfhe14[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://eddffcv23[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://asgttttay12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://pexelmeetboooky[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://cloud-d49[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://aciripacturaquick[.]z13[.]web[.]core[.]windows[.]net/
hxxps://ssrt12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://yy1jkhdshjfkshfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://tronbcjnma8s3w[.]z13[.]web[.]core[.]windows[.]net/?_event=01537cf734d68b16a3f6f89526ff73ec
hxxps://tronbcjnma8s3w[.]z13[.]web[.]core[.]windows[.]net/?_event=6a577360f6ce6dc06995528978277e61
hxxps://chuytrty[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2182
hxxps://ice-b7h[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dfas14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://platformretro[.]z13[.]web[.]core[.]windows[.]net/
hxxps://m7khfudutduyfiuy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://gfhe14-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ugbdsahg[.]z21[.]web[.]core[.]windows[.]net/winside/Win15swtjxpdz060dsx1i/index[.]html
hxxps://prosecutions[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://freshstarthappens[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://dispiyyyy22h[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-812-266-1221
hxxps://d4gffghfgfhfhghgghgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://yy2asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://lood15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://joney6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://joney6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://conditional[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://mango-5cx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://antivirus-99z[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://e1sadasdasdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://buipopokhhuh1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9823
hxxps://flowtracesopen[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://flowtracesopen[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
hxxps://lood16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://22cr33[.]z21[.]web[.]core[.]windows[.]net/
hxxps://hgkd12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://parle16[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://database-360[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://midnides002[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
hxxps://s6egvergegewgw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://m5wefdewdfqwedfqw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://dfd22[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://4b4nv[.]z13[.]web[.]core[.]windows[.]net/
hxxps://s7ethergergeg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://rrs14[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://rrs14[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://deeq15[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://luxetapvenuesx[.]z13[.]web[.]core[.]windows[.]net/
hxxps://ashyyyy3[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://joney1[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://mjgg15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://xdsd14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://xdsd14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://midnides001[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
hxxps://intelhauswell[.]z13[.]web[.]core[.]windows[.]net/
hxxps://star-3j7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dynamic-cdo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://joney5-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://ssrt11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://ssrt11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://e7sadassdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://xdsd15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ssrt14-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bdnd15[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd15[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://jupitar-447[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://cnmj14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://456576647[.]github[.]io/test-123456/Wi0n0erSHaa0mpAlert037/index[.]html
hxxps://joney112-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://lood12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://onkpayhbill1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9823
hxxps://bildndph2bjkwww[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6390
hxxps://microsoft-turtle-app-c3hzt[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
hxxps://d1asadfdscdscds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://mnm13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://cnmj16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ashyyyy[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://liquidyoucodes[.]z13[.]web[.]core[.]windows[.]net/
hxxps://dfas11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://blamesoneshe[.]aseshasilanad[.]my[.]id/win/index[.]php?vq=GAzfMNwTBBXJ1EI3XqajClRDSFJabkxKa2JMOHpNVThacGRGY3c9PQ==
hxxps://e5hgjjgjghjghjgjghjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://lood13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://s54wrgwegewgw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://static-dwa[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://intalyticsxnova[.]z13[.]web[.]core[.]windows[.]net/
hxxps://zcb2jknams9[.]z13[.]web[.]core[.]windows[.]net/?_event=d8b1c5a2be83e9e2ab972e32005ace3f
hxxps://zcb2jknams9[.]z13[.]web[.]core[.]windows[.]net/?_event=c67af89cdd38e394f010a23e7082836a
hxxps://bheu16-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vibewavesbytes[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://vibewavesbytes[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
hxxps://bdnd14[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bdnd14[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://aimgettrains[.]z13[.]web[.]core[.]windows[.]net/
hxxps://s11rhterhrehtehe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://dfas12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://dfas12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bnjj22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://e6dsfdffdsfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://d9sadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://d033[.]z21[.]web[.]core[.]windows[.]net/
hxxps://vyie20[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://joney7-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://joney7-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://eddffcv20[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://dispiyyyy1ssd[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-2984
hxxps://helixergoidluxe[.]z13[.]web[.]core[.]windows[.]net/
hxxps://d11sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://coder-rbc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://bdnd11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bdnd11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://mjgg15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://t65ethergewgewgwr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://skcuritt015[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://asgttta2[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://baippnhg1cdd[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://skcurity098[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://detectednortonalert[.]com/folf9[.]net/ts/Wi052nhelpWwh052/index[.]html
hxxps://jelobisa[.]pages[.]dev/
hxxps://hardware-c29[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://parle11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://bpnpayhjk1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6951
hxxps://xdsd16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://asgttta1[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://rrs14-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://nenetiprori[.]dismelanggarman[.]my[.]id/win/index[.]php?vq=dTIPv2kcZdHjZD7ItkcPymxteGtBTnJ3b1FSbURQN0xyQ1NRM0E9PQ==
hxxps://esxxc2-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://bomolilerablagl[.]mendpersetujuanne[.]my[.]id/win/index[.]php?vq=788TtIQUqedWqUIL5PS2LVE3a3NhbUV0YWgrc1VpMHZ2WkJ1eVE9PQ==
hxxps://gridmovioragt[.]z13[.]web[.]core[.]windows[.]net/
hxxps://kasyauhsas-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://xcfrrtt09[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://nuetr001[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
hxxps://asttssll3[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://xdsd14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://xdsd14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://vcnr11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://dfas13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://e10asdasdasdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://reiulyf4[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://supportsnows[.]pages[.]dev/
hxxps://gfhe16[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://gfhe16[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://onliobillyyh1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-2984
hxxps://buipopo1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-803-371-3584
hxxps://buipopo1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9823
hxxps://nbdidb006[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
hxxps://spinspruceshub[.]z13[.]web[.]core[.]windows[.]net/
hxxps://makeit44[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://xdsd11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://xdsd11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxp://ahmed-ahvip[.]site/
hxxps://jkhgfd[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2215
hxxps://udee15-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://b1721q29248518e184b5[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d00hhgbnokns73e46020&sou=fb1f1c8ef4fd999e98565cee7&cost=Insurance&ip=www[.]ussa[.]com&7=108[.]190[.]9[.]159&8=&9=
hxxps://e13sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://wwwwgovnindasaa[.]pages[.]dev/
hxxps://udee15[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://cnmj11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://paynhhbil2nkm[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6390
hxxps://oanlkpayyyy1cdd[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-803-371-3584
hxxps://dfas16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://dfd21[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-3402
hxxps://dfas15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://vgyt13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://cloggedsituations[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://storage-91t[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://s9ugyfyfyfiuyiuod[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://waitingforit[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://oanlkpayyyy1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-803-371-3584
hxxps://esxxc2[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://bioboothfitclick[.]z13[.]web[.]core[.]windows[.]net/
hxxps://skcuriti114[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://baopplayyon1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://afs4dg[.]z13[.]web[.]core[.]windows[.]net/mac[.]html?bcda=+1-855-771-1474
hxxps://t2wershnrgegeww[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://skcuritu107[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://r5evnepikjk2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-337-6390
hxxps://nou1mj89vg7wib42[.]z21[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-908-3568
hxxps://xdsd15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://facebookdiablesupporte[.]blob[.]core[.]windows[.]net/$web/Wi0ninf0jck002/index[.]html
hxxps://asgttta1-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://sun-50s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://xcfrrtt12-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://cnmj13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://m2sdgsaedgvsadgs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://65futvgyih8o7yhg[.]z13[.]web[.]core[.]windows[.]net/cfg65gdd[.]html?ph0nq=+1-818-900-7019
hxxps://skcuriti092[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://bdnd16-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd16-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://cricket-e9l[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://wwwgreatnet[.]pages[.]dev/
hxxps://revhepikk2cx[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-337-6390
hxxps://calculator-16v[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://deeq14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://deeq15-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2142
hxxps://m3lfuyduduyfuyfy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://air-9qk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://y11kjsajkahksahjsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://oanjplayth2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6390
hxxps://lood14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://lood14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://lood14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://cnmj11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://eddffcv2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://vcnr11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://cnmj16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://domain-3q9[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://exploringnew[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://baippn2njjdff[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://english-check[.]netlify[.]app/
hxxps://bdnd16[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd16[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://gfhe15[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://gfhe15[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://supremestuffs[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://yeew13[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://e11saadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://bnjj21-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://hgkd14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://revbepii2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-877-337-6390
hxxps://s10uyydtudtyduyfy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://gfhe11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://colour-6se[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://shoporirawnutrient[.]z13[.]web[.]core[.]windows[.]net/
hxxps://structosfurvox[.]z13[.]web[.]core[.]windows[.]net/
hxxps://lood11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://rrs16-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://rrs13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://lood16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://lood16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://onliobillpayyh1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-2984
hxxps://bdnd15-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://skcurity010[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://thoejzx[.]z31[.]web[.]core[.]windows[.]net/?gad_source=5&gclid=EAIaIQobChMI787Wp7nejAMVpfFMAh0FBDpgEAEYASAAEgJUqPD_BwE
hxxps://primeusajapan[.]pages[.]dev/
hxxps://skcuritu118[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://d5ghgfhgfhgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://system-bkw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://yapahttnhh1df[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-2984
hxxps://rrs13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://rrs13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://m8fyjdhshreher[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://vcnr12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://lood11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://lood11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://seal-app-2-x6oim[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2215
hxxps://mchin11-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://predictionsonn[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://banglachoda[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://tronbmkals83w7[.]z13[.]web[.]core[.]windows[.]net/?_event=011177067c39aebaeeb67042f7a64e59
hxxps://tronbmkals83w7[.]z13[.]web[.]core[.]windows[.]net/?_event=7a79512c7d89f76fc5eab6bc3fede075
hxxps://bheu17[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://joney1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://joney1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://e9hjghgjhgjjghjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://d2hgjgjgjgjgjgjhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://joney2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://joney2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://demo1-avz[.]pages[.]dev/
hxxps://yy9kkhkjhkhkhkhkhk[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://bauplonlinn1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://xdsd13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://xdsd13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://xdsd13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://xdsd13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://dfas11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://core35ertdsfsfsfa[.]z11[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-816-382-0345
hxxps://rrs15[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ice-djg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://nosidetools[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://zcb2wa8uygcv[.]z13[.]web[.]core[.]windows[.]net/?_event=3f1945c8e64d5f823424590ba1345d0c&click_id=1f281kxm9n457i1&tid=6&subid=wolfandsheperd[.]com&ref=wolfandsheperd[.]com&3
hxxps://deployesdads[.]pages[.]dev/
hxxps://postcrestivefinsx[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://postcrestivefinsx[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
hxxps://postcrestivefinsx[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://asjuttt2-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://gfhe13-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://asjuttt5-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://ssrt13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://ssrt13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://dispiyyyy1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-803-371-3584
hxxps://mail-7t6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://keyboard-4el[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://trackm341[.]sg-host[.]com/do/a[.]html
hxxps://mjus14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://7001jc75rni0jzal400srhxu[.]z13[.]web[.]core[.]windows[.]net/winside/Win15swtjxpdz060dsx1i/index[.]html
hxxps://mnm11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://henrym342[.]sg-host[.]com/do/a[.]html?sid=20250422022416a3ba93c081fac56ec8&kw=[.]us[.]04[.]desktop[.]windows[.]edge&subid=SUBID
hxxps://xvmvgq[.]z31[.]web[.]core[.]windows[.]net/
hxxps://e3sadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://vb44a[.]z21[.]web[.]core[.]windows[.]net/
hxxps://e8saasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://vyie22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://gfhe12[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://gfhe12[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://hugkeepjoyhuv[.]z13[.]web[.]core[.]windows[.]net/
hxxps://hgkd14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://acid-1e1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://gfhe12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://hellothemesa[.]pages[.]dev/
hxxps://yy4safasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://t1rgwesgvewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://sun-bwp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://yeew11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://tronbxfva54es9[.]z13[.]web[.]core[.]windows[.]net/?_event=31af3ed2d5ec4337ea3515df4778af2e
hxxps://tronbxfva54es9[.]z13[.]web[.]core[.]windows[.]net/?_event=c7edca5eb5ac8974e0d90d053671d1e9
hxxps://s4eh4ergewrgegr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://planet-1of[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://bayttppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6951
hxxps://bayttppayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://cnmj13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://supportenglishjapanese[.]pages[.]dev/
hxxps://hotspot-9lm[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://xdsd16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://xdsd16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bheu17-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://video-79e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://rrs15-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://rrs15-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://skcuritt068[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://d8ghjgjgjgjgjjhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://makeit22-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://e14sdasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://dolphin-app-ikrjj[.]ondigitalocean[.]app/
hxxps://blueprint-1jh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://jukd14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://d12dsdsdsdfsdsddf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://mnm11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://b3cb4dbdb0894bd4ae55[.]z13[.]web[.]core[.]windows[.]net/
hxxps://harddisk-3bm[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://yeew13-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://yeew13-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://number-7er[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://solarenergy-qib[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://hyttty4-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://gjyhgbyhjv[.]z11[.]web[.]core[.]windows[.]net/
hxxps://kods11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://parle11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://material-7gx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://joney3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://tronbshj7a33e[.]z13[.]web[.]core[.]windows[.]net/?_event=0161e24ef35b85d99d05c06c27440e38&click_id=1f281n1m9r8i5rs&tid=7&subid=anxiter[.]com&ref=anxiter[.]com&3
hxxps://yeew11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://panttybilhjh1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-812-266-1221
hxxps://mnm12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://baopplayyo2wjhjk[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://inkaxisassiste[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://inkaxisassiste[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://joney112[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://yeew12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://andrewsame1212[.]github[.]io/27x7-window-support-helpline/
hxxps://baippayuu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://xdsd12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://xdsd12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://sun-euq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://bpnpayhjk1cdc[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6951
hxxps://talkgridmovioras[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://talkgridmovioras[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://talkgridmovioras[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
hxxps://talkgridmovioras[.]z13[.]web[.]core[.]windows[.]net/chrm/index[.]html
hxxps://baippn2njj[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://diga[.]dz/?p=dd10cf3d85ccbe6c00b2cf29de60fe06&u=4512bc4ba2930a1740121208161c030742070f464c410710560d1446504217061a010e5f160c0810090a155f551e0813190651015f000e07055258435a045101070e03005e
hxxps://dfas15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://m4uuyddfuydfudfu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://d10sadasffasfsaf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://dfd20[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-3402
hxxps://bahpattb1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6951
hxxps://dfas13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://rou[.]z45[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://mindisatrap[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://ssrt12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ssrt12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bdnd12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://shark-app-9alr3[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2215
hxxps://starkitsbrights[.]z13[.]web[.]core[.]windows[.]net/
hxxps://e12saddsadsadsaas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://s12edfewfqwefq[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://skcuriti093[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://reiulyf2-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://dfas14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://dfas14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://curatorsa[.]pages[.]dev/
hxxps://vcnr16-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://weffdfffgds01dfs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-818-791-1860
hxxps://bnjj21[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baippayuu1cds[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-574-4511
hxxps://joney5[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://kasonubed[.]mendpersetujuanne[.]my[.]id/win/index[.]php?vq=eTfwF4yw1rdz7XkvlDu9UWErM2dhYnVzUkZ5SFZKQmtmN2dsRFE9PQ==
hxxps://paynhhbi2xcc[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-337-6390
hxxps://tarosupstudiosc[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://tarosupstudiosc[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://tarosupstudiosc[.]z13[.]web[.]core[.]windows[.]net/edg/index[.]html
hxxps://lood15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://baippnhg1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-855-673-4906
hxxps://joney6[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://bdnd14-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://dosespotservers[.]z13[.]web[.]core[.]windows[.]net/
hxxps://xdsd11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://xdsd11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://d13hjsddhkjsadkhjsadkh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://bahppaunonli2ddf[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-812-266-1221
hxxps://xdsd12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://xdsd12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://gfhe16-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ssrt11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://ssrt11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://kods11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://vgyt15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://zularvj26t5sc30k[.]z21[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://sunshineandglossary099[.]blob[.]core[.]windows[.]net/sunshineandglossary099/index[.]html
hxxps://d14asdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://constructions[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://bdnd13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://bdnd13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-9630
hxxps://e4fdgdgfgdfgdfgdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://cnmj12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vyie23[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1971
hxxps://tronbcnmja8s4e9[.]z13[.]web[.]core[.]windows[.]net/?_event=d3dc4b3f0f06eb9e895496475b9496c3
hxxps://tronbcnmja8s4e9[.]z13[.]web[.]core[.]windows[.]net/?_event=82694d3d6e7c1eb5a141e70cf0ed0baa
hxxps://alskioai09[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://fiberwrapmesinfo[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
hxxps://fiberwrapmesinfo[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
hxxps://hyperstepagile[.]z13[.]web[.]core[.]windows[.]net/
hxxps://s8igyftdutfyifgis[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://earth-1nb[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://asjuttt5[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2198
hxxps://baipljkayh1cds[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-8444
hxxps://skcuriti041[.]z13[.]web[.]core[.]windows[.]net/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
hxxps://y10fdggdfgdfgdfdgf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://lood12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://m1srgesagasgag[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://bdnd13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-855-535-4547
hxxps://facebookpro[.]world/
hxxps://baipljkayh1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-2984
hxxps://bahppaunonli2[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-1897
hxxps://henrym340[.]sg-host[.]com/do/a[.]html
hxxps://www[.]romantic-mclaren[.]64-225-71-233[.]plesk[.]page/
hxxps://eagle[.]assa[.]my[.]id/?p=d7363b880558ffbf80e163808529cb01&u=c1d8c4298d3b0b4046494b5e1c4d0250445c56104610064750564d105a1316511c5a57091c5d09470f514c095f4f05461f5d0850040f0f01030901155055500c5d52511703
hxxps://whatswrong[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

If you entered any personal information, change all passwords and alert your bank and credit card companies.
Enable multi factor authentication to prevent access from attacker.
If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.

NOLA Defense

Search This Blog