2025-05-02 - Tech Support Scam - Phishing Capmapign Observation Alert

123 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 123 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://ffav11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://w6dsfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dayt14[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dayt14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ueeot13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://vsfo15[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://skcuritd010[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://th8ewdgfvewgvew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://geui15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf25-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://f2wesgbergewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wolfsexmykinky[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vdos13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ca11he1lpn0wrnre112[.]pages[.]dev/fonts/4uagrenhsxjlgdugo1oill3owp4[.]woff2)format(
  •  hxxps://ashttetl5-secondary[.]z7[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ykfow11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://cxgh18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbhna4ed98u[.]z13[.]web[.]core[.]windows[.]net/?_event=2b5405fe38eb2897f50be301931348be
  •  hxxps://vbtr17[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sady14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fddr11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ddfx20[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://hnnjii16-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://labourday[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://vbtr16-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvku15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbdvba3w8udj[.]z13[.]web[.]core[.]windows[.]net/?_event=cc66d942b6f18199438aa69337bb11ff
  •  hxxps://dsaoe11[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://fseu16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weszx3[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui16[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddiu12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://skcuritf108[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://sdmn21-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://1406l74d28954e695a16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://1406l74d28954e695a16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://fsfbr14[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://lionfish-app-2-aolxr[.]ondigitalocean[.]app/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://fdfm14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbjk84eslz[.]z13[.]web[.]core[.]windows[.]net/?_event=4d3032703e3f340e1d9379b2bc385205
  •  hxxps://1k56ab911a2542c6bda6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://1k56ab911a2542c6bda6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://3rfsdfs02sdffs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-389-6356
  •  hxxps://fdhg14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://henrym351[.]sg-host[.]com/do/a[.]html
  •  hxxps://henrym351[.]sg-host[.]com/do/d[.]html
  •  hxxps://cvku16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dspr12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvku13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui21-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://mp111[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://codingoswise[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://vsfo13[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf24-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://xnme12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://fseu15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdsu21-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://storage-5u7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdfds16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://utuo15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdmn22[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://adorable-biscuit-9b4ae0[.]netlify[.]app/w01in0har1er012/
  •  hxxps://fsdw13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://sdsu21[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://sdcx22-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dayt11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://wriurlfk4[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://tsdo12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj14[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://x3gghfhgfhffhfgf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sdmn17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr16[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb14-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb12-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdfm13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb12[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdfds14-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb17-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdhg14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zxju26[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://sdaz12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://34esssdgs06sss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-818-900-7019
  •  hxxps://sdaz13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://oiuj11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://ehagvw8b1t0o[.]z21[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://microsoft-0x008676-app-qvgec[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://oiunnbb17[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdhg12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://virus-50a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://geui22-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ices-bgk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oiuj11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://apple-cx1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dontlaugh[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://x4asdasdasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://l69ykennjxk2tu2onzuzfco9dhovzf[.]pages[.]dev/W08Myr0hotline0JP07/
  •  hxxps://2ewfsafaa01sss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-441-0188
  •  hxxps://fsfbr15-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ddfx20-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zxju21[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dsuy11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weszx1[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cxgh14[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://trackm403[.]sg-host[.]com/do/d[.]html
  •  hxxps://computer-20l[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cvds14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://hentaidorcfantezi[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fseu12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb18[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ecoachessuperment[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f13aefvaedvasdva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ifdkew[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://idew15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://ddiu12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://ddfx15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdfds15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx21[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weszx5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb16-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vsfo16[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf26-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://23rwffdgas02sdssd[.]z31[.]web[.]core[.]windows[.]net/weresdfe45d3ex[.]html
  •  hxxps://sdmn18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://wiqlfkh-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ddfx14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://newdevicesecureapp004[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://fhhhnn11[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://oiuj15-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://skcuritg038[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://vdos1-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://football-e98[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fsdw13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://litchi-eyx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://832h7298229b9b935406[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://832h7298229b9b935406[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://fdhg15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fofaeeleya[.]z1[.]web[.]core[.]windows[.]net/
  •  hxxps://fdfm16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://th6ufuydtduufytt[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://memory-90n[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://th1r1wgwegfewf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dayt13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdmn18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://2652hb1d8l416162aac6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://weszx2[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://desiresupersex[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f11ytdutduttydu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://helpdesksupport[.]site/Wi066nh1delpElon66/index[.]html
  •  hxxps://tronbma5rs9uj[.]z13[.]web[.]core[.]windows[.]net/?_event=e6c80d4b44c3fb6182331c2aad637741
  •  hxxps://fdhg15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tubeolubepoke[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ddiu14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://cxgh15[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://usos11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://tronbjafc8s7y[.]z13[.]web[.]core[.]windows[.]net/?_event=5f32b4b70d2a0f92b5c72d8c4087c396
  •  hxxps://rfeagdgdfgs05tdgsd[.]z13[.]web[.]core[.]windows[.]net/inde14x[.]html
  •  hxxps://fdhg16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://support[.]app1eios[.]dpdns[.]org/
  •  hxxps://sdaz11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://fdfm16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://fdfm13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://mumolumutrarachuch[.]fernals[.]my[.]id/win/index[.]php?vq=JHvWVjD4ABR80iYGin+XLVFFZXM1SVFMRXhDcFFwV0VoeU5hakwzTmxoYlB6MlJmNEQreEZLaE5qblFHWkZQNGxEZW5sZ1VaSW9ROWE1TlpkWElHUjRUL0FWUW1FRkg4ZE53UG1xTkFIeEtsWFM2MmRvL0FIcUpMQktoaFRSbFVoY1VvZUppUlJzbWFSNmVyT3lteHIxakpwNVlqYnJUVEkyNWtVazFaSVNnN3ovMXJQdEMxVkl0NzJ6U1o3ZjZVS0hacGF0TmRXSi9HL0lMVA==
  •  hxxps://dspr11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://w3sadasdasddasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://deseart[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://bipllkyy1[.]z13[.]web[.]core[.]windows[.]net/Ma012ch1delpSh012/index[.]html?Aniph=1-844-610-8005
  •  hxxps://ee2h7l2282f04d5f9006[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://ee2h7l2282f04d5f9006[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://worstwitch[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://james-amber[.]vercel[.]app/Wi011nh1delpSe011/index[.]html
  •  hxxps://vbtr12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://awuertd-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://smarthone[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tronbfc8udfk[.]z13[.]web[.]core[.]windows[.]net/?_event=73f3f9d38925a9e7a99ff12b1ed3a1fc
  •  hxxps://vsfo12[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbkjans5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b8e9d4aef3da3a93287efd1bccecd22c
  •  hxxps://slkdkkfkd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://oiunnbb19[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cxgh19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr21-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://f7ethrehrehrehre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bhjbyubj[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://weszx1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://c14589dd3h5d4gl089c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://c14589dd3h5d4gl089c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://sdmn20[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://a23559dc6d0g455d9c06[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://a23559dc6d0g455d9c06[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://fsdw15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://geui12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb13[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbdvnas4e8[.]z13[.]web[.]core[.]windows[.]net/?_event=a8dfcbacd181dfd465dfcceecb8deffe
  •  hxxps://th9fdhhdrthrdnhr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sdfds11-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://x1assdasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gzs4rfth1em[.]pages[.]dev/smart89/
  •  hxxps://bgbgyvy[.]z11[.]web[.]core[.]windows[.]net/?utm_medium=paid&utm_source=fb&utm_id=120221084717040530&utm_content=120221101906490530&utm_term=120221101906570530&utm_campaign=120221084717040530&fbclid=IwY2xjawJ_4o1leHRuA2FlbQEwAGFkaWQBqxx0j4rsUmJyaWQRMTIxaTJrd20zTzRSVjBkQkIBHkseC486OzHiwrp8FsiBl6hbWBqSngoNiD4j87zF4ljwyCPiDn8ElIAMheYJ_aem_bMc2CKJiLlSkMOKyW0tR5A
  •  hxxps://idew16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://geui21[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://xnme13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://massageadultweb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reitgufk4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://adamseekae[.]z43[.]web[.]core[.]windows[.]net/
  •  hxxps://sdfds13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvds16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dayt12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvds14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cold-csy[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kldjfkjfjf783jjhfcdn01[.]azureedge[.]net/
  •  hxxps://oiuj16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui14[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://1011v[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sady15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://a21587d3w35h4g90acd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://17639869[.]github[.]io/securitysafer2/
  •  hxxps://ddfx11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sady14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fos22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://bwest2-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://vsfo14[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf24[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-877-593-8130
  •  hxxps://sdmn21[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ftryyru0[.]z28[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dayt12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://w5fffdfgdfdfdfdfgdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://geui22[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://1256219211654h289cd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://1256219211654h289cd6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://siutseri2[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://wwinnddwwwwertergdfd33[.]netlify[.]app/
  •  hxxps://ueeot16-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://malware-386[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://idew15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://fdfm14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui20[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zcb2wnamjs5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b8ee8959a01c5a47248836724a7b7c12
  •  hxxps://f6ehregregregred[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://d10sadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dsuy11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://9c2589d39h82g6lf9556[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://geui13[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://trackm396[.]sg-host[.]com/do/a[.]html
  •  hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://f9iufutdytduyfuygi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cxgh17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weszx2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://t1njqp7573476303[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://globalizing[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://19163713970542b9b2l6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://19163713970542b9b2l6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://utuo14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://f1ewgbresgregre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sdfds13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdcx24-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://fdhg16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://mango-2nr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oiunnbb15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb18-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sbhkdj9kbh[.]z11[.]web[.]core[.]windows[.]net/Wi0nHelpJcMaErr0t60/index[.]html
  •  hxxps://king-prawn-app-2-huxpd[.]ondigitalocean[.]app/
  •  hxxps://digitalseenu[.]github[.]io/june--new/
  •  hxxps://dayt15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdmn20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://wiqlfkh3-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://fdhg12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvds16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://kldskdkkdskd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://vbtr13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddiu14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://b83amcukzf7onjh[.]z19[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://backlights[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://squid-app-m3a9h[.]ondigitalocean[.]app/
  •  hxxps://th8dsfveadvasdv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cvku13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui19-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://wriurlfk4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://3fefsdfs03dsfsfs[.]z11[.]web[.]core[.]windows[.]net/iwdsfttds[.]html
  •  hxxps://7c6cf593[.]flc-adg[.]pages[.]dev/
  •  hxxps://sdmn19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zxju26-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://hdiwuhrw[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
  •  hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://tronbh7a4es8u[.]z13[.]web[.]core[.]windows[.]net/?_event=7f4fae9fdcab168688bb6b5e1d1f564b
  •  hxxps://baiuklpayy1x[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2106
  •  hxxps://sdnm15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
  •  hxxps://dspr11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://alskiiia0[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://vogue[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://dsuy12[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vsfo12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://oiuj13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://f8sfbsdvbsedbadfva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://iotpornerorobotics[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://adfgadsgfdsg[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
  •  hxxps://bhjhb[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://xbaxjsaxjsa[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://awuertd[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ddfx16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ressasnewaecappapph0014[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://tronjavbs4ed8[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs1m7gma30m987&tid=789&subid=century-inc[.]com&ref=century-inc[.]com&969
  •  hxxps://edwffsd01ssfsd[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-685-2003
  •  hxxps://utuo12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fos22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dsuy13-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ykfow13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://utuo12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://w8fsgdfgdffdfgdffg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vbtr14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dhdiplayyy1vcc[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?Aniph=1-888-444-5270&_event=e919604c824972819208e6f922407682
  •  hxxps://2fx02mg751q84f0x8216[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://2fx02mg751q84f0x8216[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://dspr15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://heika-6-cnhhajfpavfyhugb[.]canadacentral-01[.]azurewebsites[.]net/
  •  hxxps://trackm394[.]sg-host[.]com/do/a[.]html
  •  hxxps://3rfdsfdsds05tddfa[.]z11[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-623-900-6920
  •  hxxps://zxju25-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://deditrulatrober[.]mession[.]my[.]id/win/index[.]php?vq=oDmyL8U3QfyqIw8HjuJbM0FwZzNoTzNVTS81QkNNamlIY2FQSDR5TkxqcDZ3aG1tOHArbzFoSzYwSlJ6dXZ4V1Y3RmUvMGE3QjUzVUs1UmNnbFUrT0s0WmpPUjk5L1JkRTJBbTM1akY5MG5BZEtBcmtEcWNOUmdEU0tBOGJ3MWsrcGVFQzk4QmNCSHl4dHhyUytndllGd0NGckVBMXByMDRGdTFaKzRVanh1alB5THNaTDhxSzU0U1E4STcvSWcrOVZFM3Z0RmF0Q002MFFudA==
  •  hxxps://ddfx17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://object-1uf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://czlvd815gt9nj4273bh6rqym[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x2gghfhgfhfgghfhgfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://geui19[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://hindi-614[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://trackm399[.]sg-host[.]com/do/d[.]html
  •  hxxps://uyfctuj[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://fdhg13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://12k6bl1902j522b29c16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://12k6bl1902j522b29c16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://b7a589d5h6efg720a686[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://d11ghghghfgghfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wiqlfkh4-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://cvku15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui18[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zoonudetwinds[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ymhny001[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-907-8862
  •  hxxps://zxju24-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://f3egbewrgewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://cvku16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://2b1589dq95h14eg5a7e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://2b1589dq95h14eg5a7e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://alskiiia0-secondary[.]z23[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ashttetl-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dsaoe13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://hghhjh[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://tronbhja6s4e[.]z13[.]web[.]core[.]windows[.]net/?_event=d8f32afafc4b94369a010b6495130f29
  •  hxxps://sady16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vdcxxzy3[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://cvku12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cxgh19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dspr14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://104[.]156[.]227[.]133/W0in0sNw0Shu1Er887/index[.]html?Anph=1(901)-213-8807
  •  hxxps://vsfo15-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tasrrrttf-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://sdaz14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cxgh16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sscx1[.]github[.]io/rewerwsrtrtjh22vjgfgc/
  •  hxxps://xnme16-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vsfo11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://f54erhregerger[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sdfds14[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdmn17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://f12uyfutdutfduyfyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cheetah-ed0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://th10esdvesdvsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fsdf22-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://utuo15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm1[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://zcb2wjnams5r8[.]z13[.]web[.]core[.]windows[.]net/?_event=519fa86a4b27bc38dda597b7da228ecb
  •  hxxps://th1ewhfoievw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ddfx22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr20[.]z13[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr18[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx21-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vsfo16-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://vbtr22[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://reitgufk4[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://xnme16[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdcx24[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://baihpaltyy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-888-481-2106
  •  hxxps://ddfx19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://reitgufk1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://zxju23-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://weszx5[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://63796974[.]github[.]io/test-1/Win0helpS0h0line67/index6f36[.]html?Anph=null
  •  hxxps://fseu13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://xnme11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://sady15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui20-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdfds16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vsfo14-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr20-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://wriurlfk1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://th3wrgvewvewwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://yrfcxx15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://nethotmilfxyza[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://xnme12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://th7eafewfwefwef[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fdhg11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb13-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdaz13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://adultlgbtqweb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://geui16-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://th13jvhjcjhcjhkjh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dspr16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sfdhsgfhdgh[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
  •  hxxps://sdcx22[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dsaoe11-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://th12jydtdyfiuguik[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dayt15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://oiunnbb14[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cxgh14-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr17-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf22[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvku14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tronbkjnams75r[.]z13[.]web[.]core[.]windows[.]net/?_event=4969df3e1c07708cb9ec03bd1882c62e
  •  hxxps://sdmn19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://tsdo12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdfds11[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://bwest4-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dspr12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf21[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://v1fdgdfgdfgdfgdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://197616a982054ab1a1f6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://197616a982054ab1a1f6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://oiuj14-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://w7gjjhgjgjhgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tromipra[.]disuaradalahgal[.]my[.]id/win/index[.]php?vq=sPOJmxAli30n4BDNw26qFmVLKzFMMlBCYVdGbDlvZTRGdnpWTGdoYURPRFpmMTZDejFaMGZjYS9DWUZRdFdUN2FXMjhFajZZTGtvSys1ME5mWVZPdy9jTFVWakdqNjFNMHlXMkhObWROTzlia1dYOHg0MzFzdFVSTkUwKytlYnZPSDVWLzl1T1JYcmRTVDhuVDhHVkJHbkFWT2dGcVQzY0EweHUxam1Bb29hWlZVTE9CMnJHYnJIWlB3QkI2UWRpU01xMTBXUzV3cTlXVGtwcg==
  •  hxxps://6t17hr2rnct3[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://sdaz11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://12169b018g2178beb0a6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://12169b018g2178beb0a6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://aiufklf1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://utuo16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://v2asdsadasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://vdos1[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://fsfbr13-secondary[.]z29[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://lion-7xt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://didnpayjjk3cx[.]z13[.]web[.]core[.]windows[.]net/Wi012nh1delpSh012/index[.]html?
  •  hxxps://tronbfvba6s5r[.]z13[.]web[.]core[.]windows[.]net/?_event=b144871fa96ef26b54d7f3c4f13cf29c
  •  hxxps://kaaa2[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://tronbjkamd4e98[.]z13[.]web[.]core[.]windows[.]net/?_event=123dd96c937f05e183bf0374815f2164
  •  hxxps://mp111-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://vbtr22-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fseu14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dspr14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://usos11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://pornousdoggy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fsdf23-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://wriurlfk1-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://idew12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://0840b[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://th2rgefwevgrehe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ressasnewaecaph001[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://fdfm12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dspr15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdhg11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://zcb2wjnams74e6[.]z13[.]web[.]core[.]windows[.]net/?_event=37be7e20428fb6417355d12e8f3fd365
  •  hxxps://zxju22[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://cxgh16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://coding-b7u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdfds15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ueeot15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://fsdw12[.]z4[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(0101)-21743-77904
  •  hxxps://fsdf23[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdw15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://h2x624b1515gdh98acd6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://h2x624b1515gdh98acd6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://fseu16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sport-3qo[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://geui12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dspr16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://f4dtherregewgewg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://oiunnbb15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://a0c559d4he7g464fb866[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://a0c559d4he7g464fb866[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://microsoft-clowning-app-pcaek[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://sdaz14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdfm12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://alskiiia9-secondary[.]z9[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://sdfds12-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dsuy12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdaz12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://d8x1279n517j4fncx726[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://d8x1279n517j4fncx726[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://xnme11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://skcuritg054[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://10d602a62j3543c982c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://10d602a62j3543c982c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://fseu13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fddr13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://sady16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dayt16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://hnnjii16[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://wiqlfkh3[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://skcuritf113[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://vbtr15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://epdg84qcawe9[.]blob[.]core[.]windows[.]net/82472264c1/7d5e2bfbd0/index[.]html?tid=c2347dc2217ffbacfd36463c6af1256d&do=zigobeach[.]com&uuid=ab8b0e36-7770-4bd4-a2b3-51e046e0ae27
  •  hxxps://playfull[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://paybillon[.]it[.]com/
  •  hxxps://th4ewfouewgifuew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://dayt13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://vbtr18-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://w4safasfasfsfsaf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ddfx17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui17[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dayt11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://utuo11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://yamay004[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-907-8859
  •  hxxps://fddr13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://weszx3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiuj15[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://utuo13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://mzqhn37vt9ld5284bg61aqyp[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kadupi[.]github[.]io/error/Win0helpS0h0line67/index6f36[.]html?Anph=null
  •  hxxps://sdfkdskdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
  •  hxxps://fyroaxyx89o9[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://hubsexfuninfos[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bwest2[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://ifdkew2-secondary[.]z32[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://utuo13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://geui17-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://hamazaa[.]z43[.]web[.]core[.]windows[.]net/?tk=cv1hKe4SNG7omZXYLsTRzx03AkqrFbjO
  •  hxxps://fsdf25[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://oiunnbb16[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://eroticbotsexbio[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cxgh15-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsfbr15[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://sun-es5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://idew14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
  •  hxxps://ddfy12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-555-1212
  •  hxxps://sdnm1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://sdnm14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fdhg13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ykfow13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://dayt16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://fsdf26[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cvds15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://ddfx11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weakhero[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://vbtr19[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://weszx4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://calculator-94m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cvds15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://skcuritf027[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://anonyms[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://klskdkdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
  •  hxxps://usedmederokpasd-secondary[.]z13[.]web[.]core[.]windows[.]net/f0471/index[.]html?clickid=d09tni55sqmc73ds9k2g
  •  hxxps://cvku14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
  •  hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
  •  hxxps://vbtr15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://f10udytdtuduyfiyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://skcuritg050[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://utuo16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://th5fbsdfvbesberb[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://scortsbrisbane[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dictionary-c3a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vsfo11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://cricket-a3i[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://vbtr19-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
  •  hxxps://dhuhshc[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-21743-77853
  •  hxxps://yrfcxx15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
  •  hxxps://xnme13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-396-6853
  •  hxxps://apratex[.]shop/
  •  hxxps://laptop-3hu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oiunnbb11-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://micronmuber-suppore-dctes[.]ondigitalocean[.]app/
  •  hxxps://fhhhnn11-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.