2025-04-30 Daily Phishing URL Summary

272 Phishing Websites Detected Today

We have detected 272 possible phishing websites in the past 24 hours.

Daily Trending Brands

Daily trending brands with detected URLs are follows.

1: Tech Support Scam (164)

hxxps://vsfo15[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx20[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://tronbdvba3w8udj[.]z13[.]web[.]core[.]windows[.]net/?_event=cc66d942b6f18199438aa69337bb11ff
hxxps://skcuritf108[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://fdhg14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dspr12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://codingoswise[.]z13[.]web[.]core[.]windows[.]net/
hxxps://vsfo13[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://oiunnbb14-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb12-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb12[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb17-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://fdhg14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ehagvw8b1t0o[.]z21[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://oiunnbb17[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://fdhg12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dontlaugh[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://2ewfsafaa01sss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-441-0188
hxxps://ddfx20-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsuy11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cvds14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb18[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://ecoachessuperment[.]z13[.]web[.]core[.]windows[.]net/
hxxps://idew15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://ddfx15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx21[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb16-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo16[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://newdevicesecureapp004[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://oiunnbb11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://fdhg15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://2652hb1d8l416162aac6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://fdhg15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://usos11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://rfeagdgdfgs05tdgsd[.]z13[.]web[.]core[.]windows[.]net/inde14x[.]html
hxxps://fdhg16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dspr11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://smarthone[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://vsfo12[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb19[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://cxgh19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb13[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://gzs4rfth1em[.]pages[.]dev/smart89/
hxxps://idew16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://massageadultweb[.]z13[.]web[.]core[.]windows[.]net/
hxxps://cvds16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cvds14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo14[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://idew15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://d10sadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://dsuy11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://t1njqp7573476303[.]z22[.]web[.]core[.]windows[.]net/
hxxps://fdhg16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb18-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://fdhg12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cvds16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://kldskdkkdskd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://squid-app-m3a9h[.]ondigitalocean[.]app/
hxxps://7c6cf593[.]flc-adg[.]pages[.]dev/
hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
hxxps://dspr11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsuy12[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://bhjhb[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://xbaxjsaxjsa[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://ddfx16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsuy13-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dspr15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://ddfx17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://czlvd815gt9nj4273bh6rqym[.]z13[.]web[.]core[.]windows[.]net/
hxxps://fdhg13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://d11ghghghfgghfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://cxgh19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dspr14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo15-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://ddfx22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx21-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vsfo16-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://63796974[.]github[.]io/test-1/Win0helpS0h0line67/index6f36[.]html?Anph=null
hxxps://vsfo14-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://fdhg11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb13-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://dspr16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://oiunnbb14[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://tronbkjnams75r[.]z13[.]web[.]core[.]windows[.]net/?_event=4969df3e1c07708cb9ec03bd1882c62e
hxxps://dspr12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://aiufklf1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://tronbjkamd4e98[.]z13[.]web[.]core[.]windows[.]net/?_event=123dd96c937f05e183bf0374815f2164
hxxps://dspr14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://usos11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://idew12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://dspr15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fdhg11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zcb2wjnams74e6[.]z13[.]web[.]core[.]windows[.]net/?_event=37be7e20428fb6417355d12e8f3fd365
hxxps://ddfx16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dspr16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://dsuy12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://skcuritf113[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://ddfx17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://mzqhn37vt9ld5284bg61aqyp[.]z13[.]web[.]core[.]windows[.]net/
hxxps://hamazaa[.]z43[.]web[.]core[.]windows[.]net/?tk=cv1hKe4SNG7omZXYLsTRzx03AkqrFbjO
hxxps://oiunnbb16[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
hxxps://idew14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://fdhg13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cvds15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ddfx11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cvds15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://skcuritf027[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://anonyms[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://klskdkdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://vsfo11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiunnbb11-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315

2: AT&T (36)

hxxps://att-107249-107309[.]weeblysite[.]com/
hxxps://attmember-101419[.]weeblysite[.]com/
hxxps://att-105868-105022[.]weeblysite[.]com/
hxxps://234664-104442[.]weeblysite[.]com/
hxxps://att-107759-109343[.]weeblysite[.]com/
hxxps://attxtruptodate-lnc[.]weeblysite[.]com/
hxxps://att-102450-106487[.]weeblysite[.]com/
hxxps://att-currently-8-7-2024[.]weeblysite[.]com/
hxxps://att-currently-11-19-24[.]weeblysite[.]com/
hxxps://att-currently-22-01-2025[.]weeblysite[.]com/
hxxps://currently-att-9-13-2024[.]weeblysite[.]com/
hxxps://acme-inc-105087[.]weeblysite[.]com/
hxxps://att-104480-107974[.]weeblysite[.]com/
hxxps://att-101107-103805[.]weeblysite[.]com/
hxxps://currently-att-4-30-2025[.]weeblysite[.]com/
hxxps://currently-att-11-14-24[.]weeblysite[.]com/
hxxps://att-104374-109160[.]weeblysite[.]com/
hxxps://attmaii-100226[.]weeblysite[.]com/
hxxps://frombtksak[.]weeblysite[.]com/
hxxps://att-103154-109990[.]weeblysite[.]com/
hxxps://att-10361[.]weeblysite[.]com/
hxxps://att-105925-105605[.]weeblysite[.]com/
hxxps://currentlyupgrade-105377[.]weeblysite[.]com/
hxxps://att-107868-105107[.]weeblysite[.]com/
hxxps://att-107488-108744[.]weeblysite[.]com/
hxxps://att-currently-02-07-2025[.]weeblysite[.]com/
hxxps://att-102363-102414[.]weeblysite[.]com/
hxxps://dadyplyly[.]weeblysite[.]com/
hxxps://att-109006-105754[.]weeblysite[.]com/
hxxps://desk-101589mailservice[.]weeblysite[.]com/
hxxps://att-104137-100200[.]weeblysite[.]com/
hxxps://att-currently-2-26-2025[.]weeblysite[.]com/
hxxps://att-108352[.]weeblysite[.]com/
hxxps://att-102497-100606[.]weeblysite[.]com/
hxxps://2023-108454[.]weeblysite[.]com/
hxxps://att-108353-104128[.]weeblysite[.]com/

3: Potential Shop Scam (18)

hxxps://www[.]wolverinebootslondon[.]com/collections/tactical-clothing-men-s-c-12[.]html
hxxps://www[.]alpinestars-thailand[.]com/
hxxps://www[.]jacketsnederlandoutlet[.]com/
hxxps://www[.]thenorthface-belgium[.]shop/
hxxps://www[.]kiplingsnorge[.]co/
hxxps://www[.]alpinestars-canada[.]ca/
hxxps://www[.]stussysklep[.]top/
hxxps://www[.]pandoranloutlet[.]com/
hxxps://www[.]vetementgapfrance[.]com/
hxxps://www[.]alpinestars-mexico[.]com[.]mx/
hxxps://www[.]luluindia[.]cc/
hxxps://www[.]owalaaustrla[.]at/
hxxps://www[.]pedroshoes[.]top/
hxxps://www[.]carhartphstore[.]com/
hxxps://www[.]salomonfactoryoutletcanada[.]ca/products/salomon-mens-midlayers-black-lsrc73584-p-1168[.]html
hxxps://www[.]sauconysgsingapore[.]com/
hxxps://www[.]sebagonorgesoutlet[.]com/
hxxps://www[.]stanley[.]de[.]com/

4: BT (12)

hxxps://btonline2[.]weeblysite[.]com/
hxxps://dff-106421[.]weeblysite[.]com/
hxxps://btseuuuu[.]weeblysite[.]com/
hxxps://btwebmailitoh104722[.]weeblysite[.]com/
hxxps://btvoicemail-104906[.]weeblysite[.]com/
hxxps://bt-105545[.]weeblysite[.]com/
hxxps://fghjkjhgghjjnow[.]weeblysite[.]com/
hxxps://eebtwke[.]weeblysite[.]com/
hxxps://dfghjdfghjghjjjj[.]weeblysite[.]com/
hxxps://b-t-108397rrttt[.]weeblysite[.]com/
hxxps://btsubmidoma[.]weeblysite[.]com/
hxxps://fytuygy[.]weeblysite[.]com/

5: Generic Email (11)

hxxps://projectoririu-xt7dgvyo[.]4everland[.]app/
hxxps://bafybeiaapckq75bi2jnzqgosdyj54i22ybxolykxxoqthgnfqqcpusg6ta[.]ipfs[.]dweb[.]link/?filename=index[.]html
hxxps://evv0s[.]preview[.]codesignal[.]com/
hxxps://rockagrowth[.]com/wp-includes/app[.]html
hxxps://pub-23b093b17c6e4880be970df3d3b56f18[.]r2[.]dev/salsewacrypt[.]htm
hxxps://projectigiiii0-o1w6uubb[.]4everland[.]app/
hxxps://bafkreiho3bwnlfniswgleu7nn6oxqe5qj23ddgeelz5k3opby4yfkiheza[.]ipfs[.]dweb[.]link/
hxxps://hdye6gfj[.]web[.]app/host:-webmail[.]corpurios[.]com:8632?+&_x_tr_sl=xesFPDzB&_x_tr_tl=xesFPDzB
hxxps://aaaacct[.]vercel[.]app/
hxxps://project666ak-w9unidnt[.]4everland[.]app/
hxxps://weneedtoverifyitsyou[.]blob[.]core[.]windows[.]net/weneedtoverifyitsyou/weneedtoverifyitsyou[.]html

6: Microsoft (9)

hxxps://cloudss-9dc6[.]krlieuawlcsoiizer[.]workers[.]dev/
hxxps://dsevbkopyre[.]tubvcdsx5482[.]workers[.]dev/
hxxps://www[.]sharestion[.]com/are/fa2187fa-8830-4fa2-8a74-fb8c523dd6c1/38ce75cd-d6a4-4315-9482-505544283027/9362c388-a368-449c-bcb0-091f1b84aa73/login?id=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
hxxps://liberty-d8x[.]pages[.]dev/
hxxps://83[.]107[.]205[.]92[.]host[.]secureserver[.]net/acessomail-judicial/?qid=7396
hxxps://pub-95e0faaf26554f4792dfc3eefedb63c9[.]r2[.]dev/reeree[.]html
hxxps://pub-c6542b65e10b483d9136554aa9cb05e8[.]r2[.]dev/passwordverification[.]html
hxxps://njedxgh[.]romerodrashraf581[.]workers[.]dev/
hxxps://pub-f488d77bc04a4676ad79ee159fe7d8c5[.]r2[.]dev/index2[.]html

7: Adobe (3)

hxxps://bridg-327e[.]igoulboadr[.]workers[.]dev/
hxxps://cold-frost-1951[.]enktcrljfezatoa6437[.]workers[.]dev/
hxxps://naeuat-14a3[.]ienainhslfcenoefa[.]workers[.]dev/

8: Steam (3)

hxxps://s[.]team-2ss[.]com/p/fhtb-mrgw/nwjpmdwv/
hxxps://s[.]team-msn[.]pro/p/hpww-tqqf/gtjdtgtm/
hxxps://s[.]team-wt[.]com/p/gkhs-kwlp/pcbaqqbb/

9: Netflix (3)

hxxps://mlp[.]aue[.]mybluehost[.]me/net25/login/login
hxxps://goz[.]mif[.]mybluehost[.]me/net/support/login/login
hxxps://sign[.]in[.]support[.]uae[.]chx[.]aue[.]mybluehost[.]me/wp-content/sup/sup/login

10: American Express (2)

hxxps://detrestrk[.]com/k/
hxxps://detresxmclk[.]com/k/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.

https://www.virustotal.com/gui/collection/user/noladefense/collections

https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

If you entered any personal information, change all passwords and alert your bank and credit card companies.
Enable multi factor authentication to prevent access from attacker.
If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.

NOLA Defense

Search This Blog