2025-03-04 - Tech Support Scam - Phishing Capmapign Observation Alert

81 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 81 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://m4uydfutdutdyudiy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://aavbbn1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-818-284-4235
  •  hxxps://aavbbn1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-5255
  •  hxxps://f2dddfdgfdgfdgfdgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f10sdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://amongstatedxs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://m7ufudytdutduyfyi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t2werehethewhrehew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f5hgfghfhfnjsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn6[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://w13adhrshbrshes[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://news3[.]eazyrollers[.]io/?utm_medium=paid&utm_source=fb&utm_id=120219673691510012&utm_content=120219680923800012&utm_term=120219680923970012&utm_campaign=120219673691510012&fbclid=IwZXh0bgNhZW0BMABhZGlkAasbKd29dEwBHQIVtsSzuzfXEeEI11UkKHD_v2E1k2T6vOeaNNdEKh3fNTI-1803MKAoDQ_aem_H9FZTVyaUv_PEqt9tdAD0A
  •  hxxps://w153werherhewrgew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cervicaloptionws[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://orange-smoke-00be96510[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://r9ighourhuoghoerier[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://zipo-w54[.]pages[.]dev/
  •  hxxps://gass01[.]z23[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-866-398-4719
  •  hxxps://bm7fyjmyojguvi0n[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://sa7ghghfhfhfhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s11asdasdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x4dsdfdsfdsfdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://security[.]034jp-windows[.]net/page/SuhMRfXQ_1738231956/index[.]php
  •  hxxps://fazz12-secondary[.]z19[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-877-339-5828
  •  hxxps://finno1-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://z1sadasdasdasddsad[.]z5[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn9[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://sa2ffhgfhfhfhfhvg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://trackm307[.]sg-host[.]com/do/a[.]html
  •  hxxps://w1srhffsgaegaaga[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://tinn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://u6gasfasfasffs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://duringporngetsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w4toiyouguogvjkljl[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sinustextgitzsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://th4uyfduyfytdyufiuo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://accbb1bikll[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5468
  •  hxxps://accbb1bikll[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5545
  •  hxxps://c3e5zmlkfc21hi7q6gspba[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://sqcuritg080[.]z19[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://pinn6[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://pinn010[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://sa6sdfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://u8asdasdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su2dagiaugdcuiaj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w3dyufyfyifiyijygyj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r5sdfsdfsdffsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://thankful-mud-008edd310[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://dcgdgfc22[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-4317
  •  hxxps://w12utduyfyfiufi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://speirtigtnpws[.]z13[.]web[.]core[.]windows[.]net/winforw/index[.]html
  •  hxxps://yuvc9-secondary[.]z31[.]web[.]core[.]windows[.]net/merrx01usahtml/
  •  hxxps://finn05-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://tinn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://3qsdsfsdfsdfdsfsdfdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://e7jnvkb5u9dit81l[.]z4[.]web[.]core[.]windows[.]net/
  •  hxxps://r4dsfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://webaswellasinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fvb12-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://f6yuhuiiubiuinoni[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w2dssdfsdfsdff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t11yrsdxjgcjhchkvhk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn8[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://mostfollowingan[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://kind-dune-02414b410[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://pinn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://finn3[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://integratedzsimport[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://u3fghgfhfghfhgfbh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://affectedsxsupply[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jaqs30jnyodw2b8t[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://v3gdffdgdfgdgfdgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sa1asdsdasssdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://supprtoneselfcx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://y4ghghghghghfghfg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn10-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://sxinterpreted[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://jh3gc89hacsok[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wusemain01track01[.]z19[.]web[.]core[.]windows[.]net/maxmini/00MacdbfGyUjLPMacin8089/index[.]html
  •  hxxps://f7daviugduiagviueda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn7-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://trackm267[.]sg-host[.]com/do/a[.]html
  •  hxxps://tinn4[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://x1sddsddsdsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://duringsxzcauses[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://monkfish-app-kxzt8[.]ondigitalocean[.]app/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5545
  •  hxxps://xtkk49t8f5o2[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://upholdingtakinfgx[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://u5sasadasfasf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r6hjgsdghjdsjgsdgjhsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://billkknh1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5468
  •  hxxps://billkknh1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5545
  •  hxxps://billkknh1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5255
  •  hxxps://t9rgsbesrghesger[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mo6htdutdtudu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://avbnnm1[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5255
  •  hxxps://f8hhkhjhkhkhkhkhk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fvb11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://q2ddsdsdfdsfdsfdfs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://janbapp1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(0101)-86220-56307
  •  hxxps://sa8sadasdasdasdsa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w12ytdtydtduyfiygyu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn08-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://valvepornsxoccur[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://trackm274[.]sg-host[.]com/do/a[.]html
  •  hxxps://pinn111[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://f12dsuicveuiwgcu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://competecompetejuxt[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://perceivedlofcisx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vigoroussporadic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://feros[.]geekbros[.]us/us/b[.]html
  •  hxxps://ambitious-pebble-052480310[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://acvbh2billlk[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-4317
  •  hxxps://jh2f78gh9asxjkaljs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w7jhjhsdhjsdjhsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sa4sadasdsadasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://infidelsavarious[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://protectedjpteensx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fvb12[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://error-2326-error-82828[.]pages[.]dev/folder1/
  •  hxxps://f13uijdwqdwqdwqd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://u4hgjgjgjgjgjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th13hgcyxygxyygfxty[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r2asdadasdasdad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ajdjakhfuahdf478[.]z21[.]web[.]core[.]windows[.]net/WINWINWIN0987FGHJJNB/index[.]html
  •  hxxps://abilljj2[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-4317
  •  hxxps://f14h9asjxksaxal[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w5gffghfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th6ftudfuyfyufiugo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w8sfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://v2sadsdasdasda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://occurspornremains[.]z9[.]web[.]core[.]windows[.]net/
  •  hxxps://x5gggfhfhgfhgfgghhg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://asuu16[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-23942-13557
  •  hxxps://su2gerbdthetrherher[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z2asdasdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn9-secondary[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://fazz12[.]z19[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-866-398-4719
  •  hxxps://w10ghfghggfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th1dyufyhfuygigu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn2[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://pjdh4w07mo5tcp9n[.]z4[.]web[.]core[.]windows[.]net/
  •  hxxps://g2fg87ahixkasjxla[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fjymxvxv73gj0j[.]z5[.]web[.]core[.]windows[.]net/
  •  hxxps://x2dsdfsdsfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m09x656nb7tin[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://agvhjq1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-6410
  •  hxxps://sunn4[.]z23[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-855-537-4270
  •  hxxps://diastolecardialz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn9[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://y3fgfdgfdgdfdfgd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh13ga8hoamll[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh12vca78hxakjs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://kenabletravoma[.]heavenge[.]cfd/win/index[.]php?vq=b8Mfl/NPybmztBQddhLTuUVhaHh6b2hoQWNSWEErOXB5NjhmZ1E9PQ==
  •  hxxps://x3asdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y11asdadasdasdsa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://avcbb1new[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-5545
  •  hxxps://avcbb1new[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-5255
  •  hxxps://pinn111-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://lionfish-app-7vuly[.]ondigitalocean[.]app/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5545
  •  hxxps://ashy-cliff-0bd868810[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://w4sadsadasddda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pkqav49jif0p3tz6drg1u2[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn4-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://z8jhgjgjhgjgjgjgj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh4fgx8haskj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://w14gbrshrehrehd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m1adofuwehofihoepw[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fvb11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://j0uw8cnc8rkslzef[.]z14[.]web[.]core[.]windows[.]net/
  •  hxxps://w12sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f3ershsrhrshsrhsh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://26262626aauussstraliaa19-secondary[.]z26[.]web[.]core[.]windows[.]net/
  •  hxxps://su7ydtyduydyfiuii[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh11cg8asxhasjkk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://webjpsupportfchance[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x1ksdsdhjsdkjhsdk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn7[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://w9uwgfiugewuigfuewo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mo2rsrysyrsyty[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn7[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://t10uytdytdtuduyfiy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mi1g87agshxjkasjx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://billl1cc[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-6410
  •  hxxps://pinn08[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://m5uifyfiyfifiguo[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh8cag8schasokjlx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r8ihsgouvwruoshff[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronjkaxv6s5[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://alrtbe[.]netlify[.]app/
  •  hxxps://f3sasadasdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y1hjghsghjsdgfjsdfjsdfg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn3-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://jh5s8gxsjaknxnxl[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y6sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mo3yddytdytutfuyh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn2-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://tinn3[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://w5dfygfukghvjgfguok[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w2ershdthaehsrtjsjs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://v1sadasddasddasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f1sadasdassdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://u1ashadjhsajdhas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dolphin-app-ubsxe[.]ondigitalocean[.]app/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5545
  •  hxxps://acvbh1dffr[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5468
  •  hxxps://acvbh1dffr[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5255
  •  hxxps://f2dtjthtdgsrhtdjtdhrs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://error-2326-error-82828456[.]pages[.]dev/folder1/
  •  hxxps://tinn10[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://finn4-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3043
  •  hxxps://a27f0t8d1wnus9xvrkcmb3[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://pinn1[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://nouncjusxtoften[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://f11ehrherdhergere[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://piousgetprnhy[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://m2srgewrgewrgewg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w16sdfvjsduihgvio[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th2ershsehsehtdht[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://k2dxb8sa7hxkjx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://protect1[.]111bkk86-s9z-7[.]com/?utm_medium=paid&utm_source=fb&utm_id=120216406556030053&utm_content=120216406558870053&utm_term=120216406558440053&utm_campaign=120216406556030053&fbclid=IwZXh0bgNhZW0BMABhZGlkAasYL2hR8FUBHVbs8HuCDE9VlvSxm35ekQyE3hkChNANhvb6z2Yccag9DG-kqc8VuwsffA_aem_I345Gs_8GjcCaUQNEWDjHA
  •  hxxps://theoriesevolutionmb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn3-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://y7ssdhjsdhjsdhjjhsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f15fag9has9ksajl[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t4df8h9lh9hbk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://u7sjhsdhjfsdfdsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://q1hghgfghhghg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://estimatescausedsxb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pinnn12[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://ohye1pig35wqlna8[.]z4[.]web[.]core[.]windows[.]net/
  •  hxxps://k1fc78ashxkajs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://trackm292[.]sg-host[.]com/do/b[.]html?sid=20250301024524d4ad41e499ecf61a0d&kw=[.]us[.]04[.]desktop[.]windows[.]edge&subid=SUBID
  •  hxxps://tinn9-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://becomingsexzlives[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f7sadasdasdassdda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://recentstatedvals[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://allowtermbiosx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn11[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://k3d7ugjchihgfj7fcyh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn2[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://f8fyfuydyfgugjfvjh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://prosexcwikipedia[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn12[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://lightskyblue-oyster-279730[.]hostingersite[.]com/
  •  hxxps://u11sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://systoleduringwebs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f10ujkyukyukyuk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mo4tytdtyfuygiu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z7sasdaasdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn3[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://acvg2vbbil2[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5468
  •  hxxps://arteryarisesxb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w6thdyfyfuyfiyugfiu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pri354skyeryhgfdyirretre[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=050-5050-1910&tk=
  •  hxxps://pri354skyeryhgfdyirretre[.]z13[.]web[.]core[.]windows[.]net/index[.]html
  •  hxxps://acvbghn3[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5545
  •  hxxps://acvbghn3[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5255
  •  hxxps://fujibazaar[.]net/jptemp/werrx01USAHTML/?bcda=(050)-5050-1887
  •  hxxps://th14trtrctvyiunnuvy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://abstinenceqbother[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pinn3-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://pinn2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://pinn9-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://anthropologyarguedbn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://t3wrshjntedjreh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f4asdasdasdasda[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://r7sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn8-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://w11sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://acvbb2news[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-4317
  •  hxxps://missavhdpicsgx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://u9hjgjjgjgjgjnj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sunn9[.]z21[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-855-537-3127
  •  hxxps://zxcxzcfd1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5255
  •  hxxps://t6fhbrsbfhrhrsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x3dccdsfdfdfs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reactivitynamedxzs[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pharmasxozcologic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://finn11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://u10afasdsdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finno1[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://finn05[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://addingjpteedsnx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mo7cga9hasxjsk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn5[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-339-5799
  •  hxxps://finn7-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://su3tdtdfuyfuyi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bombaybookies[.]z1[.]web[.]core[.]windows[.]net/Wi051nhelpHr051/index[.]html
  •  hxxps://delightful-bay-0b15c3f10[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://intenseduringsxz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tinn8[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://x6fghgfghfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://finn6[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3064
  •  hxxps://pubb16[.]z33[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1924
  •  hxxps://pubb16[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1924
  •  hxxps://mo1c8v7ashxoasklj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th7gyfuduydduyfiygi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://004mmm003mar[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://g1f8gahsjkxa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://biklljkjk1[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5255
  •  hxxps://tinn10-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://th10hgyrstydyrsytdu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://lreul236[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-23942-13557
  •  hxxps://m3yfyfiyfufyigoiu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinnn12-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://finn8-secondary[.]z6[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://k1g8ahxjkjss[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w10tehrthreherhe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn4[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://jh9cbas98chsaj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://oubv11[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1924
  •  hxxps://coronarycoronaryzb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://acvghgh1vvv[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5255
  •  hxxps://bcga7tuwxvizfedbm[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://y12gfdfgdgdgdg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://trackm294[.]sg-host[.]com/do/b[.]html
  •  hxxps://z3sadasdassdsad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th8futdttudutfuyfyi[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn12-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://finn10[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://arisenappearingnsh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://su1adsvdvbasas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th11jgdtduydiyiy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w6sadasdassdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y2ssdasfasfasfas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f1dtyfyfyjgvkjhgvgcxjh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://hbbnabil22[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-844-507-1264
  •  hxxps://th12rcrtfvygbtftr[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://atfoeikboyctslmifo[.]z13[.]web[.]core[.]windows[.]net/winforw/index[.]html
  •  hxxps://pinn010-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://varioussurveybytex[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://redcprii[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-507-3613
  •  hxxps://lbzjdcrnpfem4802[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://relatedinitiallyx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://midefbacsekitae[.]z13[.]web[.]core[.]windows[.]net/winforw/index[.]html
  •  hxxps://y10djhsdjghdsjgjsdgh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y13gfdgffgddfdgfg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://black-bush-06f2ccb10[.]6[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://azure-gpjs17gg7-robby8824[.]vercel[.]app/
  •  hxxps://finn2[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3189
  •  hxxps://avvbn1dss[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5255
  •  hxxps://billksjacc1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5255
  •  hxxps://e9wrz1pvo54siygd[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://asfdsfdshds01asfsadfs[.]z13[.]web[.]core[.]windows[.]net/index[.]html
  •  hxxps://x2hgffhfhfhfh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://error-2326-error-547337733[.]pages[.]dev/folder1/
  •  hxxps://t8uyygttyvybyub[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://affectsbenignsb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ehcqnv4l08ouoxd3[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://ovc9[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-534-0717
  •  hxxps://referredbeingsex[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://jh6x67fgkv8bn[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jado9fypkbw143mxhj8qt2[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://mi2f7c8sahxaij[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://26262626aauussstraliaa40-secondary[.]z26[.]web[.]core[.]windows[.]net/
  •  hxxps://r1aasdsasaasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x4ghgfghfghbh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://condemminimaln[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://w3sdsdsfssaddfg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w75etjtrherer[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://u2sahjgdahgajgshd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z5dhjsajhsdjhsdjh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://acvvv2billikh[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-844-507-1264
  •  hxxps://causingjavhdsxz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://avvcvv1bill[.]z13[.]web[.]core[.]windows[.]net/Wi0601nhelpSh0601/index[.]html?Anph=1-828-270-5255
  •  hxxps://jh14fxg8a9hjklsakb[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://huui9[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-5556
  •  hxxps://ng0d8wjav5b2lpr71kqtsm[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://bikll2acvv1[.]z13[.]web[.]core[.]windows[.]net/Wi0601nhelpSh0601/index[.]html?Anph=1-844-507-1264
  •  hxxps://bikll2acvv1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-844-507-1264
  •  hxxps://r3sdfsdfsdfsdfa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wusemain01track42[.]z19[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://y8ssdfsdfdsfsddsf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://newnumber-los9[.]onrender[.]com/
  •  hxxps://zno[.]enotti[.]com[.]ua/?p=c6e9e7785c1e8c1ca6323369cf05bb45&u=9407e6fc79580d42121344031a1704521006594d404a0045040c424d5c491053480058541a070f455b0b4354591503444b00424f5d53135257530e48560f5654150a460e52
  •  hxxps://w1ddadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m6fsdgesagfaegae[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://su6suuagcuoasuocoas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://5asdasdasdasdad[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn2-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://z6sahjghjasghasgjhsa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://k2c87ahxjokakx[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn4-secondary[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://f9efviegqwiugvuoew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://acvvg2bikll[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-828-270-4317
  •  hxxps://1bhbbnbh[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5468
  •  hxxps://sqcuritg087[.]z19[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://th3xrectvtcvrxcrec6t[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tinn6-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://t5fytftyfyiygiugyftu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://maintainsupporgtf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w9sadasdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://classifiedxsnodal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://y5ggfhghghghghf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://n87lwgv1ht0kimf9u[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://recreatevenional[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://4sdfsdfsdfsdfsdfsdf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pinn6-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://lreul236-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-23942-13557
  •  hxxps://w8egherherhjerhrehe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th5strsydyuduytdy[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sa5asdasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sa9sadasdasdasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pubb16-secondary[.]z33[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(050)-5050-1924
  •  hxxps://pubb16-secondary[.]z33[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-1924
  •  hxxps://su4igqefugeuqfew[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fssdfgsddfsgsd01adafe[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=050-5050-1911
  •  hxxps://k1vx7a8shxiasj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://billkaccc1[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5468
  •  hxxps://billkaccc1[.]z13[.]web[.]core[.]windows[.]net/Wi1n0helpS0h0line57/index[.]html?Anph=1-828-270-5255
  •  hxxps://su1tdyfugvhgvku[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://comparedcommandsx[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://qlhk38evt2gwsnf91qrdup[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://bidmfdextft[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://polite-forest-0b007e310[.]4[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://u12sadasdasdasdas[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://error-2326-error-547373[.]pages[.]dev/folder1/
  •  hxxps://t1edshfndgbdsbs[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://salmon-moss-0ce3bfe10[.]4[.]azurestaticapps[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://kb83mhzr0ofey2quk5xawi[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://jh1g7c8hjkxhsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f6sahjghjghjagjassa[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mo8d6x57fgikhig[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://winmicrofirewallinfo[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f5fcg8ha9xjsoxkasokj[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://generalreportvalusx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f4wevuigewiugadoe[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jh7cfav87hxaosk[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://finn5-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://sa3assddasdasddasd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y9hgjhgjjgjgjg[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://abbbb1bill[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5545
  •  hxxps://szuk0flxv6agdoi8[.]z4[.]web[.]core[.]windows[.]net/
  •  hxxps://hazz4[.]z23[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-855-537-3218
  •  hxxps://bbffhbilln1[.]z13[.]web[.]core[.]windows[.]net/Wi072nhelpSh072/index[.]html?Anph=1-828-270-5468
  •  hxxps://s10gffhfghfghggfhgf[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t7erherwherwherh[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th9uivuyfyufygiuu[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://z4sasdasdasdasdd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bakkuu6-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-86240-49945
  •  hxxps://finn9[.]z15[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673
  •  hxxps://f9sdsdfsdfsdfsdfsd[.]z13[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://aa64f1dcda7aa344d[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://finn4[.]z12[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-418-3043
  •  hxxps://passiongetsmends[.]z13[.]web[.]core[.]windows[.]net/iecx/index[.]html
  •  hxxps://passiongetsmends[.]z13[.]web[.]core[.]windows[.]net/frfx/index[.]html
  •  hxxps://followingarterysx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://finn6-secondary[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-877-339-5799
  •  hxxps://pinn1-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-537-3673

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.