134 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 134 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://aaart15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ffav11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://w6dsfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sadu15[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst91[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dayt14[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dayt14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://triugfl2-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ueeot13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://xumrucwaxmuhwruxud[.]online/Win08ShDMeEr0887x/index[.]html
- hxxps://hg1dsdfsfddsffsfdsfds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://vsfo15[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://camspplverseporn[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://th8ewdgfvewgvew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://vdget5yrht75fgf[.]z35[.]web[.]core[.]windows[.]net/Wi01nhelpSjy1047/index[.]html
- hxxps://ddfx12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://triugfl3[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sadrtewa[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html
- hxxps://ddfx13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq16[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dkkkfsk[.]z19[.]web[.]core[.]windows[.]net/windows/index[.]html
- hxxps://f2wesgbergewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://docvih9vc-frh2bzbrftdbcyga[.]canadacentral-01[.]azurewebsites[.]net/Wi0nHelpJwrr030/index[.]html
- hxxps://wolfsexmykinky[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vfdd96[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq15-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://laksiiitt0-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://sady14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx20[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sagttyt4[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://tghe13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sgdf66-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://labourday[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://ddsw51[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis24-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cvku15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://triugfl[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://safv42[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis17[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://n2hx8ild39kt[.]z21[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://tronbdvba3w8udj[.]z13[.]web[.]core[.]windows[.]net/?_event=cc66d942b6f18199438aa69337bb11ff
- hxxps://monidis21-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://safv43[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddiu12-secondary[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://skcuritf108[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://monidis22[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vfdd93-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://laksiiitt1[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://kingvc1[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://6223b8hb4453b2359036[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://asdf93[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://mncz12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://faay86-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fdhg14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ffgs62[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cvku16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dspr12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sasda12-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://cvku13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://butten27[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://safv46[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://codingoswise[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vsfo13[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sgdf61-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq51-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq15[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ghfx14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://302275656b77350b8066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://fseu15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sdsu21-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://wiuegor[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://faay83[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://utuo15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw53[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://faay84-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://test1newnfbvnndfbvodreovgihdreovirebhtgrt[.]mooo[.]com/nbjghgfvbhfhjgv15apr25/Wi0nHelpSh0Err060/index[.]html?Aniph=1-804-635-3542
- hxxps://tghe11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq18-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://0141b[.]z21[.]web[.]core[.]windows[.]net/
- hxxps://manotronochicho[.]sapliness[.]my[.]id/win/index[.]php?vq=ucQe8F23Em5GMqZDv40FvGlxRW10a1BYVktOajVxZ0lXVlFMNnFSV2dZczFiU0psRlpLK3Uwc2YxU0oxNDNOMU9lYmVLTHdISUN5VGxTdFh5Vkh5RzYyVVg1dXZyUzlVU2w3bUpqM3Y0VzRYcTRwSUdlMnVFeUIvcm1UbnNXUHZSMEZFKzNIanEvT29nQTMvdG9JbllhK1ZNb3ljSGlhVk5ZQnY4Qzc3ZUk0V0lVWFRRRWk4Y1lSb0l6aU9DTjdsZXcyWGxXSGsrTkx0NDNPbw==
- hxxps://aaart16[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdw13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://dpsi10[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://aaart11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://sdsu21[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://dayt11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://7243bb48g4ha3k492306[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://tsdo12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://x3gghfhgfhffhfgf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ffwq63[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://harrynippleshb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://monidis19[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb14-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://sgdf62-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb12-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb12[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://veretdol[.]z13[.]web[.]core[.]windows[.]net/b[.]html
- hxxps://ffxwq13-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb17-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fdhg14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis24[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vfdd91-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://faay85-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ehagvw8b1t0o[.]z21[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://safv44-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fasa71-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ghfx15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb17[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ffsa41-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fdhg12[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dontlaugh[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://x4asdasdasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://l69ykennjxk2tu2onzuzfco9dhovzf[.]pages[.]dev/W08Myr0hotline0JP07/
- hxxps://2ewfsafaa01sss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-441-0188
- hxxps://ddfx20-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://mncz15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dsuy11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sktuse01linkadmin046[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://trackm403[.]sg-host[.]com/do/d[.]html
- hxxps://sgdf63[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://nmanma[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sadu16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq56-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://camplusmilfkink[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://cvds14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://hentaidorcfantezi[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://mncz16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq11-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://aaart13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb18[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ecoachessuperment[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://arbhsdgvtxsm7s[.]z14[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://dfst92[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://f13aefvaedvasdva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://mncz11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://idew15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://ddiu12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://ddfx15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://daso46[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://talknsfwquery[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vivo19[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ddfx21[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sasda14[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://oiunnbb16-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://vsfo16[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://vfdd92[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://1904073a073630bdaa8901f0[.]z5[.]web[.]core[.]windows[.]net/wh-4/index[.]html
- hxxps://23rwffdgas02sdssd[.]z31[.]web[.]core[.]windows[.]net/weresdfe45d3ex[.]html
- hxxps://vfdd93[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://rftgdf22[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://newdevicesecureapp004[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://tghe14[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb11[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://skcuritg038[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://fsdw13[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://aaart13-secondary[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis18-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://hostsekyonlinear[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fdhg15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst93-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://butten26-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw91[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://rftgdf212-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw91-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://th6ufuydtduufytt[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th1r1wgwegfewf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://dayt13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq36[.]z29[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sdau12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq34[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://2652hb1d8l416162aac6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://daso44[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f11ytdutduttydu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fdhg15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ghfx16[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx22[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq53-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tubeolubepoke[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://mncz16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddiu14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://tghe11[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vivo17-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sgdf65[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe13[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq35[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://usos11-secondary[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
- hxxps://daso41[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://rfeagdgdfgs05tdgsd[.]z13[.]web[.]core[.]windows[.]net/inde14x[.]html
- hxxps://fdhg16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw94[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://saleclicksextoy[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://mumolumutrarachuch[.]fernals[.]my[.]id/win/index[.]php?vq=JHvWVjD4ABR80iYGin+XLVFFZXM1SVFMRXhDcFFwV0VoeU5hakwzTmxoYlB6MlJmNEQreEZLaE5qblFHWkZQNGxEZW5sZ1VaSW9ROWE1TlpkWElHUjRUL0FWUW1FRkg4ZE53UG1xTkFIeEtsWFM2MmRvL0FIcUpMQktoaFRSbFVoY1VvZUppUlJzbWFSNmVyT3lteHIxakpwNVlqYnJUVEkyNWtVazFaSVNnN3ovMXJQdEMxVkl0NzJ6U1o3ZjZVS0hacGF0TmRXSi9HL0lMVA==
- hxxps://dspr11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://w3sadasdasddasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ffgs63-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://bipllkyy1[.]z13[.]web[.]core[.]windows[.]net/Ma012ch1delpSh012/index[.]html?Aniph=1-844-610-8005
- hxxps://playsexinfolewds[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://suresystem[.]com/?p=8c53211402417204ab81a21a5424bacf&u=797013c21ad059471742425b4b1f505715575f1511425440015d44150d4144564d515e0c4b0f5b405e5a450c081d57414e5601000101555752020810070702510643580303
- hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://391ekbg1b43bkf269536[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://camsexylamodasx[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ffxwq11[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://smarthone[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vsfo12[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://rftgdf23[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb19[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://clubwearekinky[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://daso42[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fdfx31-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dfst94[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cxgh19[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f7ethrehrehrehre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bhjbyubj[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tghdf33[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sgdf65-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://mncz13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://aaart17-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq51[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://aaart15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://faay85[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdw15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://sdau13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://blushfactor[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://vfdd94-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb13[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://forutalknsfwweb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://customlovebio[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://safv42-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://pornboobiewsgit[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ddsw53-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://flixrequestaus[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://asgtttag2-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ghfx16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cuckoldinnairone[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://th9fdhhdrthrdnhr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x1assdasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://gzs4rfth1em[.]pages[.]dev/smart89/
- hxxps://metasexnetsinces[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://bgbgyvy[.]z11[.]web[.]core[.]windows[.]net/?utm_medium=paid&utm_source=fb&utm_id=120221084717040530&utm_content=120221101906490530&utm_term=120221101906570530&utm_campaign=120221084717040530&fbclid=IwY2xjawJ_4o1leHRuA2FlbQEwAGFkaWQBqxx0j4rsUmJyaWQRMTIxaTJrd20zTzRSVjBkQkIBHkseC486OzHiwrp8FsiBl6hbWBqSngoNiD4j87zF4ljwyCPiDn8ElIAMheYJ_aem_bMc2CKJiLlSkMOKyW0tR5A
- hxxps://idew16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://massageadultweb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://reitgufk4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://aaart16-secondary[.]z24[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw56-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cvds16[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis21[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dayt12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cvds14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://butten3-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://fsds41-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sady15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://butten27-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://laksiiittass-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://sady14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://vsfo14[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq34-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://daso45-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://nmanma-secondary[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dayt12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://w5fffdfgdfdfdfdfgdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sgdf62[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://9e12s56d815669dfb776[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://siutseri2[.]z14[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://thesexcluborgds[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ffwq62-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://faay82-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ueeot16-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://sexcamlesbianxsx[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://b562bj428964648h8256[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://sktuse01linkadmin048[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://idew15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://fxtw92[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f6ehregregregred[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://d10sadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://dsuy11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw54-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ffxwq13[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://trackm396[.]sg-host[.]com/do/a[.]html
- hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://0c063012659q6h61be46[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://f9iufutdytduyfuygi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://cxrel14[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://daso43-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://gfgf86-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://mncz12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq36-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://t1njqp7573476303[.]z22[.]web[.]core[.]windows[.]net/
- hxxps://globalizing[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://ffsa43[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://rftgdf22-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://11dadas[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sgdf66[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sitessexualcms[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://utuo14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f1ewgbresgregre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://mncz13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://hg2fsdffsdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fdhg16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst96[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb18-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://rftgdf23-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://daso43[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://butten28-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq23[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://sbhkdj9kbh[.]z11[.]web[.]core[.]windows[.]net/Wi0nHelpJcMaErr0t60/index[.]html
- hxxps://ddsw56[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://mncz15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://laksiiittass[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://dayt15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://photoswankromantic[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sdau11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fdhg12-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cvds16-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://kldskdkkdskd[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
- hxxps://wiuegor-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ddiu14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://b83amcukzf7onjh[.]z19[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://backlights[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://squid-app-m3a9h[.]ondigitalocean[.]app/
- hxxps://th8dsfveadvasdv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sdau11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ffxwq12[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sasda11[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://xxsq13-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://cvku13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://3fefsdfs03dsfsfs[.]z11[.]web[.]core[.]windows[.]net/iwdsfttds[.]html
- hxxps://ffwq61-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://vfdd96-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://7c6cf593[.]flc-adg[.]pages[.]dev/
- hxxps://faay81[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://hdiwuhrw[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
- hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://8802523d851f6bd6a066[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://sextsaisherwb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ditux52kacrnwpxj7rbd[.]pages[.]dev/smart89/
- hxxps://dspr11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://mncz14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ghfx14[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vogue[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://safv45[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dsuy12[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://choloo13[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vsfo12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://faay81-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://f8sfbsdvbsedbadfva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sdau12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://asdf92[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://iotpornerorobotics[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://adfgadsgfdsg[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
- hxxps://bhjhb[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
- hxxps://aaart18[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://wannamove[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://customsexnudity[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://xbaxjsaxjsa[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
- hxxps://choloo12[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq52-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tronjavbs4ed8[.]z13[.]web[.]core[.]windows[.]net/?click_id=2isqs1m7gma30m987&tid=789&subid=century-inc[.]com&ref=century-inc[.]com&969
- hxxps://utuo12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dsuy13-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://chgeofgvfcdsfgvbnhjklmpoughtdddsxwqsazeertyghyujj[.]s3[.]us-east-005[.]backblazeb2[.]com/W0in0Nw0AlxRef1Er077/index[.]html
- hxxps://fsdq55-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://skcurith120[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://skcurith120[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/visudk[.]mp4
- hxxps://fsdq54-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://moderated[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://dfst91-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://utuo12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://w8fsgdfgdffdfgdffg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://wtegi1-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://faay86[.]z29[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://wiuegor1[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dspr15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://18b2b56484086h458aa6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://sasda11-secondary[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://deditrulatrober[.]mession[.]my[.]id/win/index[.]php?vq=oDmyL8U3QfyqIw8HjuJbM0FwZzNoTzNVTS81QkNNamlIY2FQSDR5TkxqcDZ3aG1tOHArbzFoSzYwSlJ6dXZ4V1Y3RmUvMGE3QjUzVUs1UmNnbFUrT0s0WmpPUjk5L1JkRTJBbTM1akY5MG5BZEtBcmtEcWNOUmdEU0tBOGJ3MWsrcGVFQzk4QmNCSHl4dHhyUytndllGd0NGckVBMXByMDRGdTFaKzRVanh1alB5THNaTDhxSzU0U1E4STcvSWcrOVZFM3Z0RmF0Q002MFFudA==
- hxxps://ddfx17-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw92-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx18[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://czlvd815gt9nj4273bh6rqym[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://x2gghfhgfhfgghfhgfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://hg4fgfgdgfddfgdfgdgd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://qeecer21[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://trackm399[.]sg-host[.]com/do/d[.]html
- hxxps://fdhg13-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://choloo21-secondary[.]z10[.]web[.]core[.]windows[.]net/mervallmjuesinfo01usahtml/?bcda=1-888-349-1812
- hxxps://choloo12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://butten26[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis23-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://faay84[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sadu16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://d11ghghghfgghfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://monidis23[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq18[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://cvku15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://daso44-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://asdf92-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe16[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://zoonudetwinds[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vfdd91[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ymhny001[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-907-8862
- hxxps://safv44[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://daso41-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f3egbewrgewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://cxrel16-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://walrus-app-vwi9q[.]ondigitalocean[.]app/Wi0nHelpGrVErr0t043/index[.]html
- hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://19b26f2586l961bh9c26[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://asdf91-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cvku16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://aaart14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://safv41[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cxrel13-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://butten7[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://saleswholetoysx[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fc6b5f4dabf35a6048979df0[.]z21[.]web[.]core[.]windows[.]net/wh-3/index[.]html
- hxxps://sady16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cvku12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cxgh19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dspr14-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cxasxa[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ffwq62[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://zzmmkkzjjmn76n[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(877)-515-4829
- hxxps://vsfo15-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://tasrrrttf-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://butten5-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://vivo15-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://fsdq52[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ffgs62-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://5019hyhual1uqzba503229ws[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ddsw51-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ca11he1pservirums11[.]pages[.]dev/
- hxxps://tghe15[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://choloo11-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://pornsexsbsinfos[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vsfo11[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://f54erhregerger[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://27714335k41fa32fahb6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://f12uyfutdutfduyfyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th10esdvesdvsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fxtw95-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst96-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://utuo15[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq23-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dfst95-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://9932c11d85kv6ce389e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://132130476h7s4255a7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://xxsq14-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://hg3dsfsdfsfsdfsdfs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th1ewhfoievw[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ddfx22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx21-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://vsfo16-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sgdf61[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://sdau13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ffgs61[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://reitgufk4[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://monidis20-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://faay82[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://2152b[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://gfgf83[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://monidis25[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx19-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq53[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://reitgufk1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://63796974[.]github[.]io/test-1/Win0helpS0h0line67/index6f36[.]html?Anph=null
- hxxps://sadu14[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://matureraunchify[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sady15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://asdf91[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://vsfo14-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://th3wrgvewvewwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tghe15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://381d1434607kh8zab506[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://nethotmilfxyza[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sgdf64-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://daso42-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://th7eafewfwefwef[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fdhg11[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb13-secondary[.]z30[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://qwfsfdss01adafsafs[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=+1-816-441-0317
- hxxps://hg5fggdfgdfgdfgdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fseu15-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://adultlgbtqweb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fxtw96-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://th13jvhjcjhcjhkjh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://dspr16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sfdhsgfhdgh[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
- hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://f2513fsn44g235e6ae16[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://ornate-bonbon-95aacd[.]netlify[.]app/
- hxxps://vivo15[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://hg6sghashgdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th12jydtdyfiuguik[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://dayt15[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst93[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://gfgf81-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://monidis22-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://storiesboutiques[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://oiunnbb14[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://rabitxxvideosexc[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://cvku14-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst92-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tronbkjnams75r[.]z13[.]web[.]core[.]windows[.]net/?_event=4969df3e1c07708cb9ec03bd1882c62e
- hxxps://fxtw93[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://tsdo12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://mcwa98vb07ku[.]z19[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://dspr12[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://v1fdgdfgdfgdfgdfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://mncz11[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://w7gjjhgjgjhgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fxtw96[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq14[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://tubesxyzhotchurch[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vfootagebabes[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://aiufklf1[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://utuo16-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://v2asdsadasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://juggling[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://rftgdf212[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://9f2022192485j7bf95c6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://butten28[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://kaaa2[.]z24[.]web[.]core[.]windows[.]net/
- hxxps://ffgs61-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tronbjkamd4e98[.]z13[.]web[.]core[.]windows[.]net/?_event=123dd96c937f05e183bf0374815f2164
- hxxps://wholegetubisale[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fsdq55[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dspr14[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://usos11[.]z22[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(050)-5050-2197
- hxxps://pornousdoggy[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://idew12[.]z4[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://th2rgefwevgrehe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://3qrewe635fada[.]z35[.]web[.]core[.]windows[.]net/
- hxxps://ssza52-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://safv45-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dspr15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fdhg11-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx18-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://pussymadamdoll[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ffgs63[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://zcb2wjnams74e6[.]z13[.]web[.]core[.]windows[.]net/?_event=37be7e20428fb6417355d12e8f3fd365
- hxxps://ddfx16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ueeot15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://monidis17-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdw12[.]z4[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=(0101)-21743-77904
- hxxps://fsdw15-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://batingmasterinfos[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://acrobats[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://vfdd95[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://arswingingpersonals[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sadu14-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://blowhashteenweb[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://triugfl-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://dspr16[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ffsa43-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw54[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://f4dtherregewgewg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://monidis18[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis25-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dpsi12[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://ffxwq12-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb15[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ffwq63-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fsdq54[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dfst94-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ffsa42-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://tghdf33-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dsuy12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://skcuritg054[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://artcordlessdilda[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tghdf32-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fseu13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://faay83-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://ffsa42[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://daso46-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://easyk295[.]sg-host[.]com/us/b[.]html?sid=20250506020451da94a4316786847091&kw=[.]us[.]05[.]desktop[.]windows[.]edge&subid=1745654184
- hxxps://sady16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dayt16[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw93-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dirtyshoppingforu[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://intimatescortvrs[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://safv43-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://xxsq21-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://skcuritf113[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://sadu15-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw52[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://reqoiufljk-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://blablablablabla[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://th4ewfouewgifuew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://dayt13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://w4safasfasfsfsaf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tghdf31[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://monidis19-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://aaart14[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ffsa41[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dhurina[.]net/en/?p=447be4089315827644f2ecd95331f53f&u=7f66e4050bfc0d4044454358494c045046505e1613110047525a45160f1210511e565f0f495c0f470d5d440f0a4e0f441d5100030955115801050913055456565543451001
- hxxps://ddsw55[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://dfdq35-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://cxrel14-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://ddfx17[.]z1[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://pornotologyfines[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://dayt11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sktuse01linkadmin017[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://utuo11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://yamay004[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-866-907-8859
- hxxps://ffxwq11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://h7khjhgjghjghjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://junissd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://utuo13[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://d712nl9d865s677eb3e6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://mzqhn37vt9ld5284bg61aqyp[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://kadupi[.]github[.]io/error/Win0helpS0h0line67/index6f36[.]html?Anph=null
- hxxps://sdfkdskdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-1991
- hxxps://ilovecamstoys[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://hubsexfuninfos[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://sgdf64[.]z20[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://safv46-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://tghe12[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://utuo13-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw52-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://hamazaa[.]z43[.]web[.]core[.]windows[.]net/?tk=cv1hKe4SNG7omZXYLsTRzx03AkqrFbjO
- hxxps://choloo11[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb16[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
- hxxps://ddsw55-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://eroticbotsexbio[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://mncz14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://68128804a6734427b4d22afe--elaborate-hummingbird-cc8ffa[.]netlify[.]app/
- hxxps://idew14-secondary[.]z20[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-21743-77904
- hxxps://services[.]hexashoponline[.]store/
- hxxps://ddfy12-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-555-1212
- hxxps://fdhg13[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ghfx15[.]z35[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://fxtw94-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://dayt16-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://cvds15[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://ddfx11-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://vfdd94[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://sexdollcafeinfo[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tyz8wrgdlu0q[.]pages[.]dev/smart89/
- hxxps://cvds15-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://tghdf31-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://skcuritf027[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://anonyms[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://klskdkdk[.]z13[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(050)-5050-2155
- hxxps://usedmederokpasd-secondary[.]z13[.]web[.]core[.]windows[.]net/f0471/index[.]html?clickid=d09tni55sqmc73ds9k2g
- hxxps://cvku14[.]z20[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://bestbutiquesstore[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8=&9=
- hxxps://d352b9958b9662hla7b6[.]z13[.]web[.]core[.]windows[.]net/?SUBID=d037provd3fs73fun38g&sou=47e31e3b7f4047fe7eeb281a0&cost=gmail&ip=gmailk[.]com&7=172[.]58[.]240[.]65&8&9
- hxxps://fsdq56[.]z30[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://f10udytdtuduyfiyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://skcuritg050[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://spectacularsexo[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://utuo16[.]z30[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://daso45[.]z35[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://th5fbsdfvbesberb[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sgdf63-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://gfgf85[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-21743-77904
- hxxps://scortsbrisbane[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vsfo11-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfo01USAHTML/?bcda=1-888-844-8315
- hxxps://choloo13-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfoweb01USAHTML/?bcda=1-888-844-8315
- hxxps://oiunnbb11-secondary[.]z10[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.