2025-04-30 - Tech Support Scam - Phishing Capmapign Observation Alert

160 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 160 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

hxxps://aasd13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ecoverse[.]oxoliving[.]com/?p=296e31646b4c96127839abdc683474ea&u=6acb910f8d0d514544164b5e1f4b58554603561045165c4252094d1059154c541e0557091f5b53420d0e4c095c495f431d02085101174f040156011553530a0940535c0357
hxxps://skcuritd010[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://tronbhajns73[.]z13[.]web[.]core[.]windows[.]net/?_event=85affa4d9126dcdf10b0ae572365026b
hxxps://lkjo12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://enjoyechopiant[.]z13[.]web[.]core[.]windows[.]net/
hxxps://geui15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://quicksands[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://fsdf25-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://tempklavb6w[.]z13[.]web[.]core[.]windows[.]net/?_event=f4acd753a0bddc5dad07120a574ec106
hxxps://oiuj16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://freedomadultgit[.]z13[.]web[.]core[.]windows[.]net/
hxxps://vdos13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ca11he1lpn0wrnre112[.]pages[.]dev/fonts/4uagrenhsxjlgdugo1oill3owp4[.]woff2)format(
hxxps://ashttetl5-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ykfow11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://cxgh18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cxds33[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://tronbhna4ed98u[.]z13[.]web[.]core[.]windows[.]net/?_event=2b5405fe38eb2897f50be301931348be
hxxps://vbtr17[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo43[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fddr11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://revbepiii1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-481-2116
hxxps://d501dc6fc35242c38742[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://d501dc6fc35242c38742[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://tronbmjaks85r[.]z13[.]web[.]core[.]windows[.]net/?_event=322e7c64107e18036d443a7a9c5056f8
hxxps://tronbmjaks85r[.]z13[.]web[.]core[.]windows[.]net/?_event=c9c2683b881c36e8e7e65e4c318aa81a
hxxps://tronbjm8es5r[.]z13[.]web[.]core[.]windows[.]net/?_event=26f86ef12ae0fd8d79920f6c216232f7
hxxps://hnnjii16-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://tempocv63wa7[.]z13[.]web[.]core[.]windows[.]net/?_event=e24d777c44c74eb9008d62bc1b8b84f4
hxxps://ac9h3c2162bf420baf75[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://vbtr16-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://tron3wzmn8[.]z13[.]web[.]core[.]windows[.]net/Wi061nhelpVi067/index[.]html
hxxps://dsbn19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsaoe11[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://weszx3[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui16[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdmn21-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://d17e33eada7e40a69da2[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://d17e33eada7e40a69da2[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://1406l74d28954e695a16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://1406l74d28954e695a16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://fsfbr14[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://lionfish-app-2-aolxr[.]ondigitalocean[.]app/windows/index[.]html?bcda=(050)-5050-2155
hxxps://famn15-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://eiurwlf2[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fdfm14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxds14[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://tronbjk84eslz[.]z13[.]web[.]core[.]windows[.]net/?_event=4d3032703e3f340e1d9379b2bc385205
hxxps://1k56ab911a2542c6bda6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://1k56ab911a2542c6bda6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://3rfsdfs02sdffs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-389-6356
hxxps://henrym351[.]sg-host[.]com/do/a[.]html
hxxps://henrym351[.]sg-host[.]com/do/d[.]html
hxxps://ghcfgxdgxf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
hxxps://geui21-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://mp111[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fdeg13-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fsdf24-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vbtr11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://a6dhs8oz2b73[.]blob[.]core[.]windows[.]net/d340c0d3e1/2b87422412/index[.]html
hxxps://xnme12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://rieulf4-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://storage-5u7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sdfds16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdmn22[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://adorable-biscuit-9b4ae0[.]netlify[.]app/w01in0har1er012/
hxxps://trackers7[.]actualapartments[.]com/
hxxps://sdcx22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://wriurlfk4[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://cxds36[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://lkjo12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://oiuj14[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://sea-turtle-app-vur3o[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2180
hxxps://sdmn17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vbtr16[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fdfm13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdfds14-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxju26[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sdaz12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://34esssdgs06sss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-818-900-7019
hxxps://aasd16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://sdaz13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://oiuj11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://jiyrrtll4-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://baillpayy1x22[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-3056
hxxps://dsbn16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://bdjpdynhty1dcdde[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-375-0579
hxxps://microsoft-0x008676-app-qvgec[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
hxxps://famn12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsbn14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://trackm354[.]sg-host[.]com/do/d[.]html
hxxps://930b[.]z13[.]web[.]core[.]windows[.]net/
hxxps://virus-50a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://geui22-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ices-bgk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://oiuj11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://apple-cx1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://fdsg14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://7ebfh196f578424a9f15[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://thewoods[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://fsfbr15-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sexolynaughty[.]z13[.]web[.]core[.]windows[.]net/
hxxps://zxju21[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://weszx1[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cxgh14[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://jhgcfgjhh[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2155
hxxps://861c5f0a5fa8464197d2[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://861c5f0a5fa8464197d2[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://computer-20l[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://laiiiai9[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dfnb16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dfnb14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://ecoachessuperment[.]z13[.]web[.]core[.]windows[.]net/
hxxps://sasdt14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://eiurwlf5-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ifdkew[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sdfds15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://5fe6e3c79f2e4737a102[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://5fe6e3c79f2e4737a102[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://weszx5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fsdf26-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo43-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dfnb15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdmn18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wiqlfkh-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fdsg15[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fhhhnn11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://eiwutg-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://oiuj15-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo42[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://beautifulphase[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://dsbn17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://vdos1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://football-e98[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://rufkl1-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://litchi-eyx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://832h7298229b9b935406[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://832h7298229b9b935406[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://dsbn12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fofaeeleya[.]z1[.]web[.]core[.]windows[.]net/
hxxps://fdfm16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://memory-90n[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sdmn18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://askl13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://famn16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://weszx2[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://desiresupersex[.]z13[.]web[.]core[.]windows[.]net/
hxxps://helpdesksupport[.]site/Wi066nh1delpElon66/index[.]html
hxxps://tronbma5rs9uj[.]z13[.]web[.]core[.]windows[.]net/?_event=e6c80d4b44c3fb6182331c2aad637741
hxxps://eiwutg4[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://aasd16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsbn11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://bapayyn1cccxzx[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-481-2116
hxxps://cxgh15[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://usos11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://uytrdfg[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2155
hxxps://lkjo11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://aasd14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://tronbjafc8s7y[.]z13[.]web[.]core[.]windows[.]net/?_event=5f32b4b70d2a0f92b5c72d8c4087c396
hxxps://rfeagdgdfgs05tdgsd[.]z13[.]web[.]core[.]windows[.]net/inde14x[.]html
hxxps://eef609f793cf4ea3a872[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://eef609f793cf4ea3a872[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://vbtr11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baipplayy2hj[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-3056
hxxps://support[.]app1eios[.]dpdns[.]org/
hxxps://tronbla3ws8[.]z13[.]web[.]core[.]windows[.]net/?_event=fce28766e20ad581208bd264c22d5279
hxxps://sdaz11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://fdfm16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://fdfm13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://deseart[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://tronbhnabjs8[.]z13[.]web[.]core[.]windows[.]net/?_event=3d400a92d8190fc67869b56b50690d38
hxxps://bdjpdynhty1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2113
hxxps://ee2h7l2282f04d5f9006[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://ee2h7l2282f04d5f9006[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://worstwitch[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://james-amber[.]vercel[.]app/Wi011nh1delpSe011/index[.]html
hxxps://vbtr12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://awuertd-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://smarthone[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://tronbfc8udfk[.]z13[.]web[.]core[.]windows[.]net/?_event=73f3f9d38925a9e7a99ff12b1ed3a1fc
hxxps://tronbkjans5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b8e9d4aef3da3a93287efd1bccecd22c
hxxps://slkdkkfkd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://sceo39[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://zazonamug[.]z1[.]web[.]core[.]windows[.]net/
hxxps://vbtr21-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo39-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://weszx1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baipplayy2hjxc[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-3056
hxxps://c14589dd3h5d4gl089c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://c14589dd3h5d4gl089c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://sdmn20[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://a23559dc6d0g455d9c06[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://a23559dc6d0g455d9c06[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://geui12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://trackm363[.]sg-host[.]com/do/b[.]html
hxxps://zxcd16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://tronbdvnas4e8[.]z13[.]web[.]core[.]windows[.]net/?_event=a8dfcbacd181dfd465dfcceecb8deffe
hxxps://0fd71349aca4410f8812[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://0fd71349aca4410f8812[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://05140318h7301j6ag2186[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://05140318h7301j6ag2186[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://sdfds11-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sasdt13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://chasodot[.]satpoinal[.]my[.]id/win/index[.]php?vq=sCdrYtf7/fAI5qqdCHh3KjRVUS9jWkw1bWxCbHMwb1ZHVGpURjdDajhXR1Mxc1Q4aEcraEc1NmNURHY3L0owdzQ1bXNOVERFeUxMTm52ZldnOEhZU3NBTzN0Q3MwZHNUdmQybkl4R2pWYi9sNTNnd3g1V0x0eVN3YnV2RXNaN0hPWE5Hd2QyTXZuc2p2d25hSklCZEk1czAyaGk4ZTFXTnZsamMzN0x3ZTMzVFBjVmFackoxQzU2OVRjRGhpYmpNSXJQT2NtK3hBTWpOYlhzcg==
hxxps://famn15[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://geui21[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://xnme13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://adamseekae[.]z43[.]web[.]core[.]windows[.]net/
hxxps://sdfds13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://iyh4e9wqqfmn[.]blob[.]core[.]windows[.]net/d340c0d3e1/2b87422412/index[.]html
hxxps://f93009511a774532bcb2[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://cold-csy[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://kldjfkjfjf783jjhfcdn01[.]azureedge[.]net/
hxxps://oiuj16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui14[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsbn20[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://1011v[.]z13[.]web[.]core[.]windows[.]net/
hxxps://a21587d3w35h4g90acd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://17639869[.]github[.]io/securitysafer2/
hxxps://vbtr12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fos22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://bwest2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fsdf24[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-877-593-8130
hxxps://sdmn21[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baillpayyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9815
hxxps://ftryyru0[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://bahpsyyy1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-9815
hxxps://geui22[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://70828f10c6cd46c2bf82[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://70828f10c6cd46c2bf82[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://1256219211654h289cd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://1256219211654h289cd6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://lkjo11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://rufkl1[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://templjakns84e[.]z13[.]web[.]core[.]windows[.]net/?_event=c51bf7321323b9b3d57f9d631de61a17
hxxps://dsbn22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wwinnddwwwwertergdfd33[.]netlify[.]app/
hxxps://malware-386[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sghcsghms1[.]pages[.]dev/
hxxps://fdfm14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui20[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zcb2wnamjs5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b8ee8959a01c5a47248836724a7b7c12
hxxps://9c2589d39h82g6lf9556[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://a6c8e7057aa0140520a5[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://dsbn22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://geui13[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dfnb14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cxgh17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sasdt16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://weszx2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://t1njqp7573476303[.]z22[.]web[.]core[.]windows[.]net/
hxxps://19163713970542b9b2l6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://19163713970542b9b2l6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://sdfds13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://aasd14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdcx24-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://1142b[.]z21[.]web[.]core[.]windows[.]net/
hxxps://fdsg14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://mango-2nr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dsbn18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://king-prawn-app-2-huxpd[.]ondigitalocean[.]app/
hxxps://d590ad038036453c9682[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://baillpayy1x22csa[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-3056
hxxps://digitalseenu[.]github[.]io/june--new/
hxxps://sdmn20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wiqlfkh3-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dfnb12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://kldskdkkdskd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://vbtr13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxds12-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://squid-app-m3a9h[.]ondigitalocean[.]app/
hxxps://dsbn16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baipkldyuu1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-481-2116
hxxps://laiiiai9-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://38b91f3eef4c451baeb2[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://38b91f3eef4c451baeb2[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://geui19-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wriurlfk4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://2047b2h50fc6479292c5[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://2047b2h50fc6479292c5[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://sdmn19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxju26-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://tronbh7a4es8u[.]z13[.]web[.]core[.]windows[.]net/?_event=7f4fae9fdcab168688bb6b5e1d1f564b
hxxps://baiuklpayy1x[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2106
hxxps://sdnm15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://alskiiia0[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://geui15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsui15[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://oiuj12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://oiuj13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://zxds12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://bhjhb[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://fdsg11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://xbaxjsaxjsa[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://awuertd[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ressasnewaecappapph0014[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://famn16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://edwffsd01ssfsd[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-685-2003
hxxps://dsbn11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fos22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ykfow13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://vbtr14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dhdiplayyy1vcc[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-444-5270&_event=e919604c824972819208e6f922407682
hxxps://2fx02mg751q84f0x8216[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://2fx02mg751q84f0x8216[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://heika-6-cnhhajfpavfyhugb[.]canadacentral-01[.]azurewebsites[.]net/
hxxps://trackm394[.]sg-host[.]com/do/a[.]html
hxxps://3rfdsfdsds05tddfa[.]z11[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-623-900-6920
hxxps://zxju25-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://bhdhjdoyy1cc[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2113
hxxps://eiwutg1[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://object-1uf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://bshpsuiu2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-3056
hxxps://aasd13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://glassdome[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://fdsg13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fdsg13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui19[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://hindi-614[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://uyfctuj[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://12k6bl1902j522b29c16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://12k6bl1902j522b29c16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://b7a589d5h6efg720a686[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://wiqlfkh4-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sasdt15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://famn12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui18[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxju24-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sasdt12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo44-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://2b1589dq95h14eg5a7e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://2b1589dq95h14eg5a7e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://fdsg12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://alskiiia0-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ashttetl-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dsaoe13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://hghhjh[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://tronbhja6s4e[.]z13[.]web[.]core[.]windows[.]net/?_event=d8f32afafc4b94369a010b6495130f29
hxxps://vdcxxzy3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://104[.]156[.]227[.]133/W0in0sNw0Shu1Er887/index[.]html?Anph=1(901)-213-8807
hxxps://askl11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sdaz14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cxgh16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baipplayy1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-804-636-6250
hxxps://helpdesk-support[.]top/Wi066nh1delpElon66/index[.]html
hxxps://sscx1[.]github[.]io/rewerwsrtrtjh22vjgfgc/
hxxps://xnme16-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://perfectcouple[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://sasdt15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://trackm362[.]sg-host[.]com/do/a[.]html?
hxxps://sdfds14[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdmn17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cheetah-ed0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dfnb11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://dsbn12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fsdf22-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dreamfimlshd[.]z13[.]web[.]core[.]windows[.]net/
hxxps://revhepiio2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-3056
hxxps://sdnm1[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zcb2wjnams5r8[.]z13[.]web[.]core[.]windows[.]net/?_event=519fa86a4b27bc38dda597b7da228ecb
hxxps://bahjipkakyyy2[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-3056
hxxps://vbtr20[.]z13[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://famn11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://sasdt13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo4[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://vbtr18[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://534hbde8f3744ba29bf5[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://zxcd14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiuj13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://vbtr22[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsbn21-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsbn13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://sasdt11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://xnme16[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdcx24[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://baihpaltyy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2106
hxxps://sasdt11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vochimep[.]satukal[.]my[.]id/win/index[.]php?vq=YmW9B9ZY+kbbcieWnZyR52RURklvdEdiZ1hWVVlaQ2xWZnFpd2RIS01taGZoNW9rUnc4enVJRUVPRmhUdG9KQ3ZZbk52blpiNjV4TGFJSlhMNlVLU0Zkbm9KZDliNk5RRC8yRUFNVFZQaVBUeGJ6bFBZNUladS9peC9CTURmRDBDbjZaUEM0N0xOdWlHTUVZZkFyQlBnRjVFbk5aaE54akJmYWVlajNUQk0xS2I0cnB2dzh4Tm5memNqb3cvdmtheUJzbjNONGJTQi93QlROaA==
hxxps://aasd11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://zxju23-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://weszx5[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://aasd12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://63796974[.]github[.]io/test-1/Win0helpS0h0line67/index6f36[.]html?Anph=null
hxxps://aasd11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://955bv[.]z1[.]web[.]core[.]windows[.]net/
hxxps://xnme11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://3rwfsfsvsa19ssfs[.]z13[.]web[.]core[.]windows[.]net/fgr4fgds[.]html
hxxps://geui20-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdfds16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vbtr20-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wriurlfk1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://6v07eth0l665[.]z11[.]web[.]core[.]windows[.]net/?zpbid=63019_08431898-20a1-11f0-80d8-070369d51bf6
hxxps://dsui16-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://yrfcxx15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://zxcd16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://cxds36-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77909
hxxps://xnme12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdaz13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://famn11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dsbn19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui16-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://jhgfdfg[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=(050)-5050-2215
hxxps://sdcx22[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dsaoe11-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fdsg11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://goldfish-app-wosqx[.]ondigitalocean[.]app/Wi0nHelpSh0Err0t62/index[.]html?ph0ne=null
hxxps://oiuj12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://cxgh14-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://vbtr17-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fsdf22[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sasdt14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://safsdgddfds01sfsfs[.]z13[.]web[.]core[.]windows[.]net/?ph0nq=+1-818-900-7019
hxxps://sdmn19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://askl11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sdfds11[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://bwest4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fsdf21[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://glaglovi[.]satukal[.]my[.]id/win/index[.]php?vq=Z8/q9kFDG/Z1lor7oeEZc3c5Nmp2Wk1YQjd6cXYxY1E2WGdnanBsbG1iSWVuclNPSUhMd1RaTmJvdDd0NytCelJvM0oxS2wyQzJjTDFWV3FKeVpnbE1wU2hhTkNmVFE5alBMMU5BTWtoSElLWHc0VWN5TWYxeGdKTC9hWThhMHBSVUtKcGNDYzNkL0YwODB6LzFHNlU0T0RYVGtNRlRxTWJoNVR4Q25sUnExL084eFdPMmVCYUZUSlpsbjY4MWcrQ1ZvV3Ezb2x6WWVKTzZXaw==
hxxps://197616a982054ab1a1f6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://197616a982054ab1a1f6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://oiuj14-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ceb00bf5dc5541a5b022[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://ceb00bf5dc5541a5b022[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://tromipra[.]disuaradalahgal[.]my[.]id/win/index[.]php?vq=sPOJmxAli30n4BDNw26qFmVLKzFMMlBCYVdGbDlvZTRGdnpWTGdoYURPRFpmMTZDejFaMGZjYS9DWUZRdFdUN2FXMjhFajZZTGtvSys1ME5mWVZPdy9jTFVWakdqNjFNMHlXMkhObWROTzlia1dYOHg0MzFzdFVSTkUwKytlYnZPSDVWLzl1T1JYcmRTVDhuVDhHVkJHbkFWT2dGcVQzY0EweHUxam1Bb29hWlZVTE9CMnJHYnJIWlB3QkI2UWRpU01xMTBXUzV3cTlXVGtwcg==
hxxps://6t17hr2rnct3[.]z11[.]web[.]core[.]windows[.]net/
hxxps://sdaz11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://12169b018g2178beb0a6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://12169b018g2178beb0a6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://fdsg12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fdsg12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://vbtr14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://askl13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dfnb12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://vdos1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fsfbr13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://lion-7xt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dsbn21[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baillpayyu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-3056
hxxps://dsbn14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsbn20-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://didnpayjjk3cx[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?
hxxps://tronbfvba6s5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b144871fa96ef26b54d7f3c4f13cf29c
hxxps://e7a99hac199a4bb9b215[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://e7a99hac199a4bb9b215[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://baimlpayuuj1[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-844-9815
hxxps://tronbxfva8s7[.]z13[.]web[.]core[.]windows[.]net/?_event=5eaba13df2471c20b6e178f637052d96
hxxps://b5cbe5a44fd44c2c92c2[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://nbrmeouhxra[.]z13[.]web[.]core[.]windows[.]net/winupet/index[.]html
hxxps://mp111-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://vbtr22-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://usos11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fsdf23-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://wriurlfk1-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://0840b[.]z21[.]web[.]core[.]windows[.]net/
hxxps://eiurwlf[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://baillpahyyu1xcc[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-804-636-6250
hxxps://ressasnewaecaph001[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://fdfm12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://bahpsyyy2kmn[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-888-844-3056
hxxps://80247eaqw76bnbt4o0x6098o[.]z13[.]web[.]core[.]windows[.]net/
hxxps://skipped[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://eiwutg4-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://zxju22[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sasdt12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://cxgh16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://coding-b7u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sdfds15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://focussparkunite[.]z13[.]web[.]core[.]windows[.]net/
hxxps://dsbn13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fsdf23[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://1038b[.]z13[.]web[.]core[.]windows[.]net/
hxxps://bqic1-secondary[.]z19[.]web[.]core[.]windows[.]net/wImSItcZUww/?bcda=1-844-540-8555
hxxps://h2x624b1515gdh98acd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://h2x624b1515gdh98acd6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://recgjpeiii2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-844-3056
hxxps://sport-3qo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://geui12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://attached[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://a0c559d4he7g464fb866[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://a0c559d4he7g464fb866[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://microsoft-clowning-app-pcaek[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
hxxps://dsui12[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sdaz14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fdfm12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://alskiiia9-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://dsbn17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdfds12-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdaz12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://d8x1279n517j4fncx726[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://d8x1279n517j4fncx726[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://xnme11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://10d602a62j3543c982c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://10d602a62j3543c982c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://stayclosetome[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://fddr13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://hnnjii16[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://wiqlfkh3[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://vbtr15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://qf3g5u2c4mw4[.]blob[.]core[.]windows[.]net/d340c0d3e1/2b87422412/index[.]html
hxxps://epdg84qcawe9[.]blob[.]core[.]windows[.]net/82472264c1/7d5e2bfbd0/index[.]html?tid=c2347dc2217ffbacfd36463c6af1256d&do=zigobeach[.]com&uuid=ab8b0e36-7770-4bd4-a2b3-51e046e0ae27
hxxps://sq6560k4qiwd[.]blob[.]core[.]windows[.]net/d340c0d3e1/2b87422412/index[.]html
hxxps://playfull[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://paybillon[.]it[.]com/
hxxps://dfnb13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://vbtr18-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://adultsupervision[.]z13[.]web[.]core[.]windows[.]net/
hxxps://dfnb16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://geui17[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://zxcd14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://baillpahyyu1[.]z13[.]web[.]core[.]windows[.]net/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-804-636-6250
hxxps://dsbn18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://fddr13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sceo42-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://weszx3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://dfnb11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://oiuj15[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://phody0m0a6dl[.]blob[.]core[.]windows[.]net/d340c0d3e1/2b87422412/index[.]html
hxxps://monkfish-app-blb5w[.]ondigitalocean[.]app/
hxxps://9ece6030b0a345418b12[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://9ece6030b0a345418b12[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://revhpeiii1dscsd[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-888-481-2116
hxxps://fyroaxyx89o9[.]z11[.]web[.]core[.]windows[.]net/
hxxps://skcuritp025[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
hxxps://dsui15-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://bwest2[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://ifdkew2-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://geui17-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://fsdf25[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://trackm367[.]sg-host[.]com/do/c[.]html
hxxps://dingdong-gvsswm2n7-bushbushbrushs-projects[.]vercel[.]app/Wi050nh1delpReSa50/index[.]html
hxxps://cxgh15-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://shoppinggocart[.]pages[.]dev/
hxxps://fsfbr15[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://sun-es5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sasdt16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://idew14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
hxxps://dfnb13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sdnm14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://ykfow13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://fsdf26[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://aasd12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://dsui12-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://weakhero[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
hxxps://fdsg15-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://vbtr19[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://weszx4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://sceo44[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-0818
hxxps://calculator-94m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://klskdkdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
hxxps://vbtr15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://litichevike[.]satukal[.]my[.]id/win/index[.]php?vq=VLQAeXE0rf6zY3G7z/ucA2VxTHc3NEYwRVEybWpMd084MUpNcWJGVzZqWVYzQlZXaDJNRld0VmlyWjM2RU5kaXZpeDJKblB6TmhLZmJsekxjTzJETnFTTGFydEV0RFBRQlFHVFozRHB1WCtUZlZwMWoyd3UvSDZLcVE2WEJFVnNKOXB3ditiM0FrdGpMUzlySXVCSTN6UXlScjZSZmYrV2s1VHE1RDhWdTVteXRzZlM4MnRiWFA0UG5OajVCUko3QUl3cWcvSGdneEg1YklyUw==
hxxps://dictionary-c3a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://09330h11813f02b7k7346[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://09330h11813f02b7k7346[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://cricket-a3i[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://vbtr19-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
hxxps://17541h0736d6f5ed9735[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
hxxps://17541h0736d6f5ed9735[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
hxxps://dhuhshc[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-21743-77853
hxxps://wdasfasas02sasa[.]z33[.]web[.]core[.]windows[.]net/ffgf45trdd[.]html
hxxps://yrfcxx15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://xnme13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
hxxps://apratex[.]shop/
hxxps://laptop-3hu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://micronmuber-suppore-dctes[.]ondigitalocean[.]app/
hxxps://fhhhnn11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
hxxps://trackm365[.]sg-host[.]com/do/c[.]html

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

If you entered any personal information, change all passwords and alert your bank and credit card companies.
Enable multi factor authentication to prevent access from attacker.
If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.

NOLA Defense

Search This Blog