2024-10-11 - Tech Support Scam - Phishing Capmapign Observation Alert

139 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 139 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://eoiuioquweoiqowe-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://wqwqwqqq-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://milkyway-dag[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://charger-68s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cczxczz[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://cczxczz[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://opd4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://defrd4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://defrd4[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://wegv5634rghwev[.]pages[.]dev/
  •  hxxps://delightful-mushroom-02b9a1410[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://httes7-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-0542
  •  hxxps://nnbvt1[.]pages[.]dev/robots[.]txt
  •  hxxps://cdcdkkjjfdcd767sxddx[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-833-582-3435
  •  hxxps://googsle[.]buzz/exploreujghfcyujkhjhnbju/
  •  hxxps://googsle[.]buzz/edgeuijhgcjuhbvgfcvhjgvhjvg/
  •  hxxps://tryrrewe[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://ca11he1lpn0wrnre112[.]pages[.]dev/fonts/KFOlCnqEu92Fr1MmWUlfCRc4EsA[.]woff2)format(
  •  hxxps://kuicker[.]blog/windowssoftware30/contentcreator/bella[.]php
  •  hxxps://trim4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://jm7lqhyjh4wb0gyyvrq[.]pages[.]dev/smart89/
  •  hxxps://tyvvr4[.]pages[.]dev/
  •  hxxps://kojn-m7w4u[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-595-5030
  •  hxxps://zaxaaaq-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://zaxaaaq-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sinzo7[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://sinzo7[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://f2u9dzffhv7jx[.]pages[.]dev/smart89/
  •  hxxps://hutaradt[.]online/explpoljkuiljkkjhkjkbjkhkh/
  •  hxxps://team-ast[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ansdg4[.]pages[.]dev/
  •  hxxps://asw14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://asw14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://adulteroussexualliaison[.]z13[.]web[.]core[.]windows[.]net/Pskjw3osdkjfeiw5oskdcf-sdfep2slk6cvfiesd-fepsd2ocifeosc-vfdofew4nschewsldk-c0wpsldk2disxc-dspogb5cszaqswxc-dpsocisdp5sdopfbvgtw6shaz/index[.]html
  •  hxxps://sinzo8-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig4-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://zxzxzxzaa-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://ahstacasfffe77[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://defrd2-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://file-533[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://10th5p2m8y4v45773[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bcskh1[.]pages[.]dev/robots[.]txt
  •  hxxps://iron-90w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://lkjifystst[.]online/edddjhgtyuhgfghhjgggh/
  •  hxxps://bcdtk1[.]pages[.]dev/
  •  hxxps://mokinaha[.]online/exjhgfdtyujhgftyhvgfg/
  •  hxxps://mokinaha[.]online/edkhgjfuyikhjgjkhg/
  •  hxxps://bcsgk3[.]pages[.]dev/
  •  hxxps://vgezmgtiud7zk[.]pages[.]dev/smart89/
  •  hxxps://mouse-6rt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-app-system123[.]pages[.]dev/
  •  hxxps://mamaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mamaaaa-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://app16jdsj[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=(0101)-20641-08469
  •  hxxps://s3[.]ap-southeast-1[.]amazonaws[.]com/b2mac[.]win[.]chaker[.]er00r[.]page[.]windo[.]key/index[.]html
  •  hxxps://enxhzdsnj9en[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://e95lq1vmgxojxrxkv7[.]pages[.]dev/smart89/
  •  hxxps://project-may[.]pages[.]dev/_fm7-alert[.]mp3
  •  hxxps://bcskh5[.]pages[.]dev/
  •  hxxps://d8268d6a3697412aa56f[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://planet-bah[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-soft00[.]github[.]io/demo/
  •  hxxps://desdff[.]dzv4bvn3j5dxn[.]amplifyapp[.]com/wah[.]html
  •  hxxps://ahstacasfffe0-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mcrosoft-services-virus-alert0x123412[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://preservesxconsistency[.]z13[.]web[.]core[.]windows[.]net/index[.]html
  •  hxxps://zxaasaas[.]z19[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(0101)-85532-40973/
  •  hxxps://zxaasaas[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://win2-z13-web-windows-net[.]pages[.]dev/
  •  hxxps://secure-app15-system[.]pages[.]dev/
  •  hxxps://ioiooio[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://ioiooio[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://lens-cej[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ndnadnam[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://ndnadnam[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dsdcvff31[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpShSaErr0t0467/index[.]html?Anph=null
  •  hxxps://reshapingsoltionsarts[.]z13[.]web[.]core[.]windows[.]net/dofi2eowsc-fdpoewps4ojmkld-depsod2iewoasxcfd5poewosd-rjfv7shd3hag-dfnmk4sjsxzdiks-c0fdeps2odi6feowsxc-fdspodi2feowsxc-dpfovfe40wpsep/index[.]html
  •  hxxps://security-alert[.]alertphase1[.]xyz/Wi0n0erAry0mpAlert048/index[.]html
  •  hxxps://time-5i2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ipoiqopipoq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://ipoiqopipoq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ipoiqopipoq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://serviceaca112ppca11he1pn0w11[.]pages[.]dev/
  •  hxxps://describedconjugalxz[.]z13[.]web[.]core[.]windows[.]net/woskj6cdcaznd-fewpsokc2jiewsd-fpdoi5fewosdf-ewpsn6azpka2diewosKd-jpakne3owskjce5woskxcjds-c0fewosx2kcjiesc-fepos5kc7diewosc-fepsod3cde/index[.]html
  •  hxxps://sedfri6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-863-329-0042
  •  hxxps://nice-ocean-040b0c010[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://hljkjljk-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://hljkjljk-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmkkjlll-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://mmkkjlll-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sdcx-2ofhh[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://distillingmanuscript[.]z13[.]web[.]core[.]windows[.]net/Wnde3woskcj5fiesdc-espdof2ewosx5csfre-wpsokc4jfeiwsd-fepd4oiewos-frepodf2ewscf0re5oskdjfies-fdp2oifeoskc-fepod5ifdoesdf-smzkew2psod/index[.]html
  •  hxxps://hispl432142s1dfsfas13[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://ansdg3[.]pages[.]dev/
  •  hxxps://h8yyleeroiqs[.]pages[.]dev/smart89/
  •  hxxps://exporntvxx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://holdingsafetyembraces[.]z13[.]web[.]core[.]windows[.]net/Pskjw3osdkjfeiw5oskdcf-sdfep2slk6cvfiesd-fepsd2ocifeosc-vfdofew4nschewsldk-c0wpsldk2disxc-dspogb5cszaqswxc-dpsocisdp5sdopfbvgtw6shaz/index[.]html
  •  hxxps://cunnlingusadulterywbs[.]z13[.]web[.]core[.]windows[.]net/Pskjw3osdkjfeiw5oskdcf-sdfep2slk6cvfiesd-fepsd2ocifeosc-vfdofew4nschewsldk-c0wpsldk2disxc-dspogb5cszaqswxc-dpsocisdp5sdopfbvgtw6shaz/index[.]html
  •  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://bcdtk4[.]pages[.]dev/
  •  hxxps://flat-1ve[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://xsdc-y799p[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-0009
  •  hxxps://byvtc2[.]pages[.]dev/robots[.]txt
  •  hxxps://bbi7m587m4byg5oj5[.]z1[.]web[.]core[.]windows[.]net/M0cSmwEr00JP1/index[.]html
  •  hxxps://uk00tu[.]github[.]io/001/
  •  hxxps://ioiooio-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://disk-13j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://frog-e49[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wqwqe[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://digidedge[.]buzz/edgeujhgfdxfghjknbvhg/
  •  hxxps://digidedge[.]buzz/explorejhgfghjvhgfh/
  •  hxxps://jkksdsds766sxssxxs[.]blob[.]core[.]windows[.]net/$web/werrx01USAHTML/index[.]html?bcda=1-805-204-7832
  •  hxxps://p0classicsxxzseries[.]z13[.]web[.]core[.]windows[.]net/woskj6cdcaznd-fewpsokc2jiewsd-fpdoi5fewosdf-ewpsn6azpka2diewosKd-jpakne3owskjce5woskxcjds-c0fewosx2kcjiesc-fepos5kc7diewosc-fepsod3cde/index[.]html
  •  hxxps://lbgsd1[.]pages[.]dev/
  •  hxxps://strange-davinci[.]159-223-36-68[.]plesk[.]page/
  •  hxxps://new-3vd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://genreator[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://metro-dr8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tyvvr5[.]pages[.]dev/
  •  hxxps://trim22-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://trim22-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://kuicker[.]club/windowssoftware30/contentcreator/bella[.]php
  •  hxxps://10th9k1w6j3b98343[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://a583232f1ebd43b0bf17[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://trim6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://game-2yr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dhvfgyfvuy4464vdhd[.]pages[.]dev/
  •  hxxps://eoiuioquweoiqowe[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://g2ptmtnngopfp1nww5xyrzpocubcxby[.]pages[.]dev/smart89/
  •  hxxps://s3[.]ap-southeast-2[.]amazonaws[.]com/k12[.]awasdn1[.]win[.]chaker[.]er00r[.]page[.]windo[.]key/index[.]html
  •  hxxps://yooyqpgurwntbztlftohuq114erjuklreohsmvjeqt1jhy[.]pages[.]dev/smart89/
  •  hxxps://support-bxv[.]pages[.]dev/
  •  hxxps://cap-4jh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://todm-9hq2z[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php
  •  hxxps://bcskh4[.]pages[.]dev/
  •  hxxps://popalart[.]nyc3[.]digitaloceanspaces[.]com/index[.]html
  •  hxxps://defrd2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://defrd2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://defrd2[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://easyk62[.]sg-host[.]com/usa/wah[.]html
  •  hxxps://ozfcselobikat[.]z21[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://jg9akelekqgh9xg[.]pages[.]dev/smart89/
  •  hxxps://preoseropentaci[.]pages[.]dev/_fm7-alert[.]mp3
  •  hxxps://preoseropentaci[.]pages[.]dev/webs[.]mp4
  •  hxxps://sinzo5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://insta-71r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://defrd5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://defrd5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://micro-service-alertc0277sb-realerror[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fghfh-heaxhnbngjawftaf[.]canadacentral-01[.]azurewebsites[.]net/
  •  hxxps://gas111[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gas111[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sinzo10[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://rodm-9scg3[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-595-5030
  •  hxxps://ednzexc6eozcv7dwywcdugh2rytjwl28ybvw[.]pages[.]dev/smart89/
  •  hxxps://trim1[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd3[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://galaxy-1nd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://98iuy98o[.]s3[.]eu-north-1[.]amazonaws[.]com/prblm/Wi0n0Err0Chtpr00010/index[.]html?phone=+1-888-889-5561
  •  hxxps://wtsyd1cqdv3p5z7[.]pages[.]dev/smart89/
  •  hxxps://httes2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-544-2838
  •  hxxps://qmzpu4[.]pages[.]dev/robots[.]txt
  •  hxxps://main[.]d39c7rem4d9kf6[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://sedfri4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-268-6994
  •  hxxps://sinzo8[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact6[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://eddyjtvfpavz[.]pages[.]dev/smart89/
  •  hxxps://56edthdxfhbx[.]pages[.]dev/
  •  hxxps://defrd8-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://serviceca11appca11he1pn0w11[.]pages[.]dev/
  •  hxxps://lbgsd4[.]pages[.]dev/robots[.]txt
  •  hxxps://jdfv-znfcx[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://slycbmdsikmz[.]pages[.]dev/smart89/
  •  hxxps://mbmmbvvv-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://wivclhdnni[.]pages[.]dev/smart89/
  •  hxxps://tinsigolucker[.]pages[.]dev/
  •  hxxps://ansdg2[.]pages[.]dev/robots[.]txt
  •  hxxps://cover-e94[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://glass-1pn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://10th2s8d4x7g56012[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dsggh34guwegf[.]pages[.]dev/
  •  hxxps://nnbvt3[.]pages[.]dev/robots[.]txt
  •  hxxps://10th2s8d4x7g56011[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cycle-6hl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxp://159[.]223[.]126[.]211/
  •  hxxps://mango-cliff-0f27eca10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://twl7nlqhdoq[.]pages[.]dev/smart89/
  •  hxxps://wqwqe-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://asw13[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://asw13[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://uuy18-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-269-1312
  •  hxxps://uuy18-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://microsoft-support-help1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://magneseum[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://trim3[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://wec44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://wec44-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://zxzxzxzaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://zxzxzxzaa[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://secure-app12-system[.]pages[.]dev/
  •  hxxps://sinzo6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://sinzo6[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://httes[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-670-2080
  •  hxxps://key-equ[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bcskh2[.]pages[.]dev/
  •  hxxps://cczxczz-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://fhhdfvdfgkfd[.]github[.]io/Microsoft/
  •  hxxps://bvbcbccvb[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://bvbcbccvb[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://bvbcbccvb[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://defrd6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://defrd6-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ahstacasfffe0[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gas68[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://pen-c00[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cotui2[.]pages[.]dev/
  •  hxxps://httes3-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-457-9855
  •  hxxps://uywfg344rruyywewegwegfegf[.]pages[.]dev/
  •  hxxps://bhvg-66sjt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://allowedwesbtoseduce[.]z13[.]web[.]core[.]windows[.]net/Pskjw3osdkjfeiw5oskdcf-sdfep2slk6cvfiesd-fepsd2ocifeosc-vfdofew4nschewsldk-c0wpsldk2disxc-dspogb5cszaqswxc-dpsocisdp5sdopfbvgtw6shaz/index[.]html
  •  hxxps://usa1ideasanguinweb04[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-3442
  •  hxxps://dfhfg5454[.]pages[.]dev/
  •  hxxps://mmnnbv-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact8[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://wqwqwqqq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://wqwqwqqq[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://uooiiuiouoiui-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://dasdasdvcca[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://dasdasdvcca[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://34wsdrtxrtzxgfxfg[.]pages[.]dev/
  •  hxxps://btcre4[.]pages[.]dev/
  •  hxxps://defrd4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://defrd4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://defrd4-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://sea-turtle-app-ntyiq[.]ondigitalocean[.]app/
  •  hxxps://wec43[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://wec43[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://nebvrfwgmifywz[.]azureedge[.]net/9796/
  •  hxxps://work-ddh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact3[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://uurrerrr[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://uurrerrr[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mamaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mamaaaa[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://uuy11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6361
  •  hxxps://wec44[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://defrd6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://defrd6[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://mmfmsaww[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://corcodile[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://owl-1tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://flame-bww[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fafswaa[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://fafswaa[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://chair-eza[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://muqq2w8vpsdo[.]z13[.]web[.]core[.]windows[.]net/?dicbo=v4-EvIdiBA-1195876348-1
  •  hxxps://sghcsghms1[.]pages[.]dev/
  •  hxxps://tronlx8uamj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sedfri3[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-843-345-2889
  •  hxxps://laptop-2ui[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zealous-smoke-0e129af10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://easyk60[.]sg-host[.]com/usa/wah[.]html
  •  hxxps://spoon-2ds[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fbsetaozcoilk[.]z19[.]web[.]core[.]windows[.]net/wintossfo/index[.]html
  •  hxxps://train-2u7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mammamaaa[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://kmnv-e8csc[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://pot-4lb[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ashgcghsd5623r23r67sdv[.]pages[.]dev/
  •  hxxps://wood-dea[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://btcre1[.]pages[.]dev/
  •  hxxps://desktop-alert-new-123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxp://143[.]244[.]165[.]119/
  •  hxxps://trestropaticmax[.]pages[.]dev/
  •  hxxps://tauji4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ewual7pkgjtkd[.]pages[.]dev/smart89/
  •  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://tauji5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://zxaasaas-secondary[.]z19[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(0101)-80523-64797/
  •  hxxps://easyk64[.]sg-host[.]com/usa/hat[.]html
  •  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://gfact5-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://vdfn-cjmsc[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://dasdasdvcca-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://dasdasdvcca-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://8030qtu9r31odwt6nl9cmjhp[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asdx-3aw4b[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://tauji4-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://trim22[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://xvideosfetish[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://opd3-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gas111-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://54e4trdry56sdxrfg[.]pages[.]dev/
  •  hxxps://table-8la[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://red-desert-0137b6f10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://bhitafara[.]online/exojihjkjnbjhuihojlkbh/
  •  hxxps://defrd8[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://defrd8[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://he110ca11he1lpn0wwb112[.]pages[.]dev/
  •  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://tauji3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://radio-8x4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dxrtszefcgchbms11[.]pages[.]dev/
  •  hxxps://puranigad[.]online/edddkhgjfjuhghjhgj/
  •  hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
  •  hxxps://trim1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://trim1-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://801013lht4776af5cdnlla0g[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://asfvnasf5at22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
  •  hxxps://r1sduycvjhsdjh[.]pages[.]dev/
  •  hxxps://cotui1[.]pages[.]dev/
  •  hxxps://tauji7-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://rebtekpopsecto[.]pages[.]dev/0wa0rni0ng0[.]mp3
  •  hxxps://rebtekpopsecto[.]pages[.]dev/_fm7-alert[.]mp3
  •  hxxps://trim5-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://sinzo5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sony22[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-831-225-1172
  •  hxxps://hgghc56dtydy[.]pages[.]dev/
  •  hxxps://bcdtk3[.]pages[.]dev/
  •  hxxps://gas33-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gas33-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gas33-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://ansdg5[.]pages[.]dev/
  •  hxxps://uooiiuiouoiui[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://uooiiuiouoiui[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://llbsdk3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6894
  •  hxxps://llbsdk1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://loshiyama[.]online/edagfdfghgfghg/
  •  hxxps://loshiyama[.]online/exagfdghgfdfghg/
  •  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://tauji5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://lysdtaij[.]online/explkjhgfdxfhjyukjhghgu/
  •  hxxps://lysdtaij[.]online/edgknbvhgjmuhjjhgh/
  •  hxxps://lysdtaij[.]online/chjkjhgghjghkjhgyhgj/
  •  hxxps://usa1devlopdigital04[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-1022
  •  hxxps://lbgsd2[.]pages[.]dev/
  •  hxxps://t21bln2t6bqz5[.]pages[.]dev/smart89/
  •  hxxps://app-6u3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://funnycomicss09[.]blob[.]core[.]windows[.]net/funnycomicss09/index1a[.]html
  •  hxxps://game-ale[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gas67-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gas67-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://main[.]d2oki1yoqvpzfi[.]amplifyapp[.]com/
  •  hxxps://bcdtk5[.]pages[.]dev/
  •  hxxps://btcre5[.]pages[.]dev/
  •  hxxps://400ml20netquantity[.]shop/
  •  hxxps://o3i6s0yatdssdo5sjbzm[.]pages[.]dev/smart89/
  •  hxxps://trim4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://usa1devlopdigital05[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-3442
  •  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://jhbaudvcv9[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://tronlmk8ud4[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqsfcvm1z47exw&tid=903&subid=ghogle[.]com&ref=ghogle[.]com&922
  •  hxxps://bcsgk2[.]pages[.]dev/
  •  hxxps://usa1devlopdigital01[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-0417
  •  hxxps://sortedhainasab[.]pages[.]dev/
  •  hxxps://llbsdk3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-7832
  •  hxxps://mmnnbv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sedfri2[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-4204
  •  hxxps://httes4-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-865-240-8884
  •  hxxps://gu67rt4usdvghds[.]pages[.]dev/
  •  hxxps://fgxcfg56edtydch[.]pages[.]dev/
  •  hxxps://gucv-jvdr5[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-595-5030
  •  hxxps://seekingslightlydivwsx[.]z13[.]web[.]core[.]windows[.]net/pnsazsx2kcjeiwsc-dpdoc4fepws2oxcd-sd0ewps4okxc7jdsdf-espocde4scfde2doesd-ewpsdfre3owskcjd5isoxc-dpcovfep2wsxc-dspxcode4osxkcs5xcfe/index[.]html
  •  hxxps://smart-3i0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bhumijajao[.]online/exagfdsjhgfdfghjhgfghg/
  •  hxxps://bhumijajao[.]online/edadfghfdscffgjgfghddg/
  •  hxxps://oiioipuupu[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://oiioipuupu[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://oiioipuupu[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://aax4qxqlxdnhr1bes[.]pages[.]dev/smart89/
  •  hxxps://easyk61[.]sg-host[.]com/usa/wah[.]html
  •  hxxps://8th5p2m8y6v04392[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://earth-d4g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gas66-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gas66-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://ytwefvgwe6734rgjwehv[.]pages[.]dev/
  •  hxxps://tskcheck00hisplink076[.]z11[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://cmkls21yyhfpo[.]pages[.]dev/smart89/
  •  hxxps://tuhbkl6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-401-9229
  •  hxxps://pushalcm7yj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://torch-8al[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://page-ey6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hig7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://secure-app-system12345[.]pages[.]dev/
  •  hxxps://sdfucvg34ggsdgcghds[.]pages[.]dev/
  •  hxxps://gas33[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://gas33[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://micro-service-alertc0277sb-realerros3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://device-alert-12123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reinterpretedexplicitly[.]z13[.]web[.]core[.]windows[.]net/woskj6cdcaznd-fewpsokc2jiewsd-fpdoi5fewosdf-ewpsn6azpka2diewosKd-jpakne3owskjce5woskxcjds-c0fewosx2kcjiesc-fepos5kc7diewosc-fepsod3cde/index[.]html
  •  hxxps://pea-f0k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-device-alert-1201[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mammamaaa-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://mammamaaa-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gas44-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gas44-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://tydtsresaui[.]online/chhhuyg6yuyhftyygf/
  •  hxxps://tydtsresaui[.]online/edgggythgugyghfyggug/
  •  hxxps://8th9k4w3j1b98342[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://r1guysdvcjhvghsd[.]pages[.]dev/
  •  hxxps://football-244[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wsdx-z6v4f[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://microsoft-security-alert[.]gamtrack[.]link/Wi0n0erAry0mpAlert048/index[.]html
  •  hxxps://ophb-cjf8d[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-467-8560
  •  hxxps://g9iifqdwg3qbrpsqqvgt1ugv5cunaocwhuzbg3zfgubs2ueb1[.]pages[.]dev/smart89/
  •  hxxps://ndnadnam-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://byvtc3[.]pages[.]dev/
  •  hxxps://kiakiabole[.]online/edkjhguioljkhguikjhg/
  •  hxxps://red-meadow-0c692c110[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://tryrrewe-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tryrrewe-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://r1sdgcvsdgh342[.]pages[.]dev/
  •  hxxps://sdv4uwefv[.]pages[.]dev/
  •  hxxps://usabc[.]pages[.]dev/
  •  hxxps://secure-app18-system[.]pages[.]dev/
  •  hxxps://uuiouiooiqqq-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://uuiouiooiqqq-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://cxxcxcxcxxz[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://cxxcxcxcxxz[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://inclinationsquotedclear[.]z13[.]web[.]core[.]windows[.]net/pnsazsx2kcjeiwsc-dpdoc4fepws2oxcd-sd0ewps4okxc7jdsdf-espocde4scfde2doesd-ewpsdfre3owskcjd5isoxc-dpcovfep2wsxc-dspxcode4osxkcs5xcfe/index[.]html
  •  hxxps://micro-soft-support[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fghgefdgfe434[.]z13[.]web[.]core[.]windows[.]net/Wi0n0Err0Sudu0087/index[.]html
  •  hxxps://hardware-a39[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ijkjut89-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-6888
  •  hxxps://b953859a-14e7-4e0a-bb24-73262bad27c6[.]s3[.]ap-northeast-2[.]amazonaws[.]com/%5E%25$&$!%25$!%23%5E@%25$$%23%5E%23%5E&@$%25!$&%25@@!$&%23!%23!&%5E%23%5E%23%5E!%23%25/index[.]html?c=dc4cf4c10aee56fd7b781030a6a20893&d=ca&ip=platform:8dded44720b36b[.][.][.]~311~[.][.][.]6985dd083e7b1d0e3c9e4f42159385/
  •  hxxps://bvbcbccvb-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://bvbcbccvb-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://httes9[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-808-302-4083
  •  hxxps://tyvvr3[.]pages[.]dev/
  •  hxxps://project-e6g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bed-20k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://iyiuyiuy-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://iyiuyiuy-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://iyiuyiuy-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://vfcd-ftwit[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-0009
  •  hxxps://jhiojoj[.]pages[.]dev/
  •  hxxps://yghb-tatak[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://micro-service-alertc0277sb-error123[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://derster[.]d7q7ndbsxsmqf[.]amplifyapp[.]com/wah[.]html
  •  hxxps://lbgsd3[.]pages[.]dev/robots[.]txt
  •  hxxps://piopipoioip[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://micro-service-alertc0277sb-realskyp2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://aniepolis[.]one/235120567_s1c8psbmq29/media/beep[.]mp3
  •  hxxps://bcsgk5[.]pages[.]dev/
  •  hxxps://hetc[.]pages[.]dev/
  •  hxxps://tyvvr2[.]pages[.]dev/
  •  hxxps://bcsgk4[.]pages[.]dev/robots[.]txt
  •  hxxps://lxxje4y0kzcscphzmph0oc3zwz3jeqeadvuvdth1fcvourjmy1pw[.]pages[.]dev/smart89/
  •  hxxps://desktop-alert-error-2100[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ghftyfh[.]github[.]io/fyugjfv/
  •  hxxps://tyvvr1[.]pages[.]dev/
  •  hxxps://hyakamani[.]online/exjghyugihkjgkgu/
  •  hxxps://hyakamani[.]online/edgfhjkjhygkhjgjk/
  •  hxxps://notes-aq8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://copy-4us[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdgycg6734rw3r[.]pages[.]dev/
  •  hxxps://gfact6-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hgmkcbfljphw[.]pages[.]dev/smart89/
  •  hxxps://opd4[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://micro-service-alertc0277sb-erroras[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://azure-gpjs17gg7-robby8824[.]vercel[.]app/
  •  hxxps://s3wqokqmcbx[.]pages[.]dev/smart89/
  •  hxxps://54rtssgfsedzd[.]pages[.]dev/
  •  hxxps://cfxd-y7gdk[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://brhycawdt1jk93u[.]pages[.]dev/smart89/
  •  hxxps://feykhjkh9fnnzpetk2w7znycoftiyjlm[.]pages[.]dev/smart89/
  •  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://jhbaudvcv9-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://bcskh3[.]pages[.]dev/
  •  hxxps://gas44[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://gas44[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://gas44[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://baseball-dcp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://software-9ah[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ugssdg5634fgwevfged[.]pages[.]dev/
  •  hxxps://qmzpu2[.]pages[.]dev/robots[.]txt
  •  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://mmfmsaww-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://zaxaaaq[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://city-8s1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-service-alert-1212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fan-cyj[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://goa4[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-304-9103
  •  hxxps://win2-z13-web-core-windows-net[.]pages[.]dev/
  •  hxxps://ipoiqopipoq-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://sinzo10-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sinzo10-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://fafswaa-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://fafswaa-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://insta10-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-0510
  •  hxxps://iojn-5gg5n[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://microsoft-windows-update-sale[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-app13-system[.]pages[.]dev/
  •  hxxps://dgvgj43evfj[.]pages[.]dev/
  •  hxxps://pornpenaivideos[.]online/Kdjpakne3owskjce5woskxcjds-c0fewosx2kcjiesc-fepos5kc7diewosc-fepsod3cdewoskj6cdcd-fewpsokc2jiewsd-fpdoi5fewosdf-ewpsn6azpka2diewos/index[.]html
  •  hxxps://oyster-app-a8q2s[.]ondigitalocean[.]app/
  •  hxxps://uuy19-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-204-1199
  •  hxxps://vs47zjozg2co[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://defrd1[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://yioyoioiwqqqw-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://yioyoioiwqqqw-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://usa1devlopdigital06[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-855-324-0461
  •  hxxps://adapter[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://micro-service-alert-233-212[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tskcheck00hisplink08[.]z11[.]web[.]core[.]windows[.]net/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
  •  hxxps://httes6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-0479
  •  hxxps://mango-wave-0374f7210[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://secure-app19-system[.]pages[.]dev/
  •  hxxps://window-csn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sedfri3-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-544-0856
  •  hxxps://uuy11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-670-9964
  •  hxxps://rs1hgcgbvfghxcg5[.]pages[.]dev/
  •  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact5[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://piopipoioip-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://piopipoioip-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://piopipoioip-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://cxxcxcxcxxz-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://cxxcxcxcxxz-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://gas67[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://tuhbkl8-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-803-250-8600
  •  hxxps://paper-2lx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-app16-system[.]pages[.]dev/
  •  hxxps://bcsgk1[.]pages[.]dev/
  •  hxxps://wec43-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://llbsdk6-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-224-7747
  •  hxxps://ahstacasfffe77-secondary[.]z11[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://opd7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://httes3[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-802-399-0506
  •  hxxps://btcre3[.]pages[.]dev/robots[.]txt
  •  hxxps://llbsdk4[.]z33[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-808-218-3280
  •  hxxps://proud-cliff-0842e6310[.]5[.]azurestaticapps[.]net/Mac08ShDMeEr0887/index[.]html
  •  hxxps://ashy-water-01ce06c10[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://calcium-3kq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://salmon-glacier-0515c4310[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://byug7qo8kkkloqibzin4yoibtnoolp4jac[.]pages[.]dev/smart89/
  •  hxxps://erfd-8xoyl[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gfact3-secondary[.]z16[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://micro-service-device-alert-1231[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://staging[.]dwta6w74teg3x[.]amplifyapp[.]com/Win08ShDMeEr0887/index[.]html
  •  hxxps://sabhilateh[.]online/edkjhguioljkhguikjhg/
  •  hxxps://ghavsdtysasgbuefhmc[.]pages[.]dev/
  •  hxxps://cotui4[.]pages[.]dev/
  •  hxxps://bcdtk2[.]pages[.]dev/
  •  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gfact8-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://defrd1-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://gas68-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://gas68-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://gas68-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://remote-eqo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://pub-83b6ecec1922429d9d4a51bea400766a[.]r2[.]dev/1060[.]html
  •  hxxps://uerj-eup26[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php
  •  hxxps://trim5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://trim5[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://10th3n7c1r9f08061[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://update[.]trendnesttech[.]com/windowssoftware30/contentcreator/bella[.]php
  •  hxxps://11th7p3n9c2f84103[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kzfuphuswrg7zp[.]pages[.]dev/smart89/
  •  hxxps://trim6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://trim6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://orange-bush-04cb4d610[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://d284puh4b9ulso[.]cloudfront[.]net/wr/?p=(0101)-20899-47181&
  •  hxxps://yioyoioiwqqqw[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797
  •  hxxps://yioyoioiwqqqw[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://fgxg56dffg[.]pages[.]dev/
  •  hxxps://trim3-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://trim3-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://hig3-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://s3[.]ap-northeast-1[.]amazonaws[.]com/k13[.]single1[.]win[.]chaker[.]er00r[.]page[.]windo[.]key/index[.]html
  •  hxxps://mmkkjlll[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://mmkkjlll[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://amkiyuerbxl89s5ykhzkggyspw8igsactb[.]pages[.]dev/smart89/
  •  hxxps://cplouty9m2[.]pages[.]dev/smart89/
  •  hxxps://asw13-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://asw13-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://a3326a9217764743a600[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tauji3[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26852
  •  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://tauji7[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://defrd5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://defrd5[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://asw14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://protecteenagerspage[.]online/Mdfe9woskdj3fewosd-ew0sdoife5woslkcfi4esd-fepdof7ewosd-frepsk2diewksc7depso-diewos4dedof7ieowsk-freps3dkcfiews-fewkmfvgts6cewpsodi/index[.]html
  •  hxxps://ybnwivpxga0b[.]pages[.]dev/smart89/
  •  hxxps://uuiouiooiqqq[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://beyobe7[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-865-243-1548
  •  hxxps://polfdm[.]pages[.]dev/
  •  hxxps://m5p7xtotzy8wry[.]pages[.]dev/smart89/
  •  hxxps://mbmmbvvv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://mbmmbvvv[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://nnbvt4[.]pages[.]dev/
  •  hxxps://easyk63[.]sg-host[.]com/usa/wah[.]html
  •  hxxps://70334p7x2zwnx4ninrrbfz02[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://secure-app20-system[.]pages[.]dev/
  •  hxxps://beauty-7tc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://httes9-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-806-544-2250
  •  hxxps://zsae-ocjyt[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9977
  •  hxxps://sinzo6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://sinzo6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-40973
  •  hxxps://sinzo6-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://black-river-05b1dd810[.]5[.]azurestaticapps[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://hig5-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23163
  •  hxxps://isdn-jsnie[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-9978
  •  hxxps://ansdg1[.]pages[.]dev/
  •  hxxps://0b97cbbd7ccf46168c08[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://serviceappinf0ca11m112[.]pages[.]dev/
  •  hxxps://hljkjljk[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-85532-42855
  •  hxxps://cotton-7su[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://r1gsdcgsdv36dgvc[.]pages[.]dev/
  •  hxxps://byvtc4[.]pages[.]dev/
  •  hxxps://secure-app11-system[.]pages[.]dev/
  •  hxxps://roketprinterservier[.]netlify[.]app/
  •  hxxps://btcre2[.]pages[.]dev/
  •  hxxps://iyiuyiuy[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-83178-96435
  •  hxxps://iyiuyiuy[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26912
  •  hxxps://goa9-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-810-221-4206
  •  hxxps://staging[.]dmjkvt7d6g4w[.]amplifyapp[.]com/wah[.]html
  •  hxxps://main[.]d2m3dga6zuxfet[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://esrd-v4kgq[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?phone=1-860-374-0009
  •  hxxps://tuhbkl4[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-805-366-5296
  •  hxxps://sinzo7-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-80523-64797

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.