2025-05-31 - Tech Support Scam - Phishing Capmapign Observation Alert

131 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 131 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://gj2safasfasfasfasffsasf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://torontoss[.]z13[.]web[.]core[.]windows[.]net/Mac08ShDMeEr0887x/index[.]html
  •  hxxps://bytelenddevplus[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weqirou3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriukhj[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w10rwgherherherh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rwuke5-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://disposition[.]pages[.]dev/
  •  hxxps://tron9514lkjhg[.]z13[.]web[.]core[.]windows[.]net/?_event=77fddf6ae09f8aff718688991e9c8ad3&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://etwoik3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://utter[.]pages[.]dev/
  •  hxxps://reioulfk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://w7iyfyfyifiyfugoi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewoirlpo5-secondary[.]z27[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://reukyfuwj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://brogate[.]pages[.]dev/
  •  hxxps://rewiuofrwlk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s2hjgjghjgjgjj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://starnusalesrop[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iuslfk3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://security-err-x40-octopus-app-pn8mv[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://reukyfuwj2-secondary[.]z26[.]web[.]core[.]windows[.]net/mervallmjerror01codeshtml/?bcda=1-833-534-7933
  •  hxxps://reukyfuwj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://etwoik1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1232fbq14b32d5019d29[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://www[.]page-radmmllukezz[.]icu/ll4332/index[.]php
  •  hxxps://thu2323sadsadasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://iuslfk3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewiuofrwlk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rtoiglkj2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://dehdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://attribute[.]pages[.]dev/
  •  hxxps://wiufdlkj1[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://bweiulf[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://reqoiutqrl5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://teriii2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://eriukhj6-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoilkr5[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://worcepanyistereinghamtures[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://moreglowingsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://plomb[.]pages[.]dev/
  •  hxxps://twueoierul3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriukhj2-secondary[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-534-7404
  •  hxxps://wiufdlkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dentcompletekr[.]z38[.]web[.]core[.]windows[.]net/W0iSmwEr00DE020/index[.]html
  •  hxxps://persist-die[.]pages[.]dev/
  •  hxxps://s11ytrtsytsdytsyt[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bteobjfk7906rc2[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-315-7341
  •  hxxps://emagogue[.]pages[.]dev/
  •  hxxps://f14advcsacsacas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://appoint-e5c[.]pages[.]dev/
  •  hxxps://wkjdhei[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://scapesyncbuddy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eilfkihk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rewiuofrwlk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://handjobjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://c1121961013402f9d7336[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://iuslfk5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mgttttrl[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://oilal17-secondary[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://eiqgulkf-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gj11ghfgfhfhfghbh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewtiougl1[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iuslfk2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://venture-bmi[.]pages[.]dev/?PubID=789&SubID=ofisu[.]one&Camp=687&Browser=edge&clid=
  •  hxxps://taggingss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://f11ewrhtdhthtrjg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://shark-app-isx63[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://eriukhj7-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewoirlpo1-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://a2cg9a8sxhsajkhxk[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rwuke6[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reukyfuwj6[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uesde8-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gnmstsrinezatu[.]z13[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://zcb2wjk84edr[.]z13[.]web[.]core[.]windows[.]net/?_event=862bf70f23fbcc126c04c188ff981f4f&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://rwuke[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqurlerou8[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reukyfuwj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://iewjfe[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://creedbiosupply[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uesde9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reukyfuwj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqurlerou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uesde6[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiurlyth1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronxhjans8u5rdf[.]z13[.]web[.]core[.]windows[.]net/?_event=270089f4fa89a7b183964155475bcc23&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://rtoiglkj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://kd6gfn2iu0ocqr9[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-908-7824
  •  hxxps://th7rrsgewfasvaedfva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewuohj2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wordlottruegoal[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wiufdlkj1-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wiufdlkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://satmai[.]blob[.]core[.]windows[.]net/$web/index[.]html
  •  hxxps://urchin-app-w5u6x[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://wiufdlkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s6wrgrsgesgrgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pooy70new8[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(855)-550-3508
  •  hxxps://resilient-salmiakki-d72015[.]netlify[.]app/
  •  hxxps://issue-7be[.]pages[.]dev/
  •  hxxps://kjfdklfkjd74[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://w13wegwsgwegfwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reukyfuwj3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://smartnavigates[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://scoutvirtaacoun[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://etwoik5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://iuslfk4[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rewiuofrwlk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://23safasfas01[.]z13[.]web[.]core[.]windows[.]net/3d5gdfgrr5f[.]html
  •  hxxps://gainmoodtunes[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uesde9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://madamlivetv[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://virtualrealjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://q18gcghoaskxjj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eilfkihk1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hedddsv4-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://w4regergregerg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th10eafvaesfcawsf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uesde3[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ostend[.]pages[.]dev/
  •  hxxps://b0128b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iezwubnryhzckyly[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://rewiuofrwlk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eilfkihk1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wander-6sn[.]pages[.]dev/
  •  hxxps://longings[.]z13[.]web[.]core[.]windows[.]net/Mac08ShDMeEr0887x/index[.]html
  •  hxxps://accord-218[.]pages[.]dev/
  •  hxxps://gocasonatu[.]z1[.]web[.]core[.]windows[.]net/?subid=30tpl8r5a7ad
  •  hxxps://syncromehargevelopedersonased[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://feoiq-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-593-8730
  •  hxxps://dolphin-app-2-rum3q[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1995
  •  hxxps://f7erhersgergew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://etwoik2-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eilfkihk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://erpetual[.]pages[.]dev/
  •  hxxps://932b1554856785889129[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eilfkihk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://d5hjgghjgjgjgjhgjg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://amotivation[.]pages[.]dev/webs[.]mp4
  •  hxxps://amotivation[.]pages[.]dev/
  •  hxxps://walrus-app-9suug[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://gopornjapanese[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://reioulfk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriukhj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efsfsggsa01ssfs[.]z35[.]web[.]core[.]windows[.]net/Wi01nhelpSjy1047/index[.]html
  •  hxxps://x3sadsadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tewouerlk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reioulfk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewoirlpo3-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://tewiuk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://bp0d5uz3bs4a[.]z19[.]web[.]core[.]windows[.]net/?ph0nq=1-888-391-9411
  •  hxxps://rwqulkgf6[.]z27[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://lemoncams[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://baeawiier[.]z27[.]web[.]core[.]windows[.]net/
  •  hxxps://tewouerlk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewtiougl4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtoiglkj[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://twueoierul1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s2egrgegewfwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reiouf-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://stripsyncsheet[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sdjkjsdjdm[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://rwuke2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewouerlk-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://crocotube[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://g15dsfsdfsdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://kdfjsse42[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://tronbkafcx65r[.]z13[.]web[.]core[.]windows[.]net/?_event=3714aeb0918a65e267ef85b481ce4a86&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://wordboostboom[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uesde2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewiuk[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://9bh19812353f04721yb96[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://squid-app-2-ydkw7[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://reukyfuwj[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gj10ghfghfhfhgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://territory-8cr[.]pages[.]dev/ai2[.]mp3
  •  hxxps://th9efwqfcqwfwq[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wiufdlkj-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwuke8[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://explorejapanwithme[.]online/
  •  hxxps://tronbkjam9s4ed6[.]z13[.]web[.]core[.]windows[.]net/?_event=b42f2ae1c876adda1ecfdceb7db89571&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://tewouerlk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://f8ddacgaieysdgcyias[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eiqgulkf0[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rwuke3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rtoiglkj8[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://8e62342761bls6d58119[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://n7jhggfhfhfhfhgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://twueoierul2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://hammerhead-app-uibqo[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://ngsting[.]pages[.]dev/
  •  hxxps://g16sfdsdfsdfsdfsddf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reiouf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gj5sdsfdsfdsddssdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://cowmmjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://myfz3el1dv9t6gqrc0ousbnk[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSjYrr0w061/index[.]html
  •  hxxps://x2hghgjghfjgjhfj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriukhj7[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://iuslfk5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://hdfghjfghjhewrtwe[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://e443ce1457ab4c6484e3[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronbkja83wenj[.]z13[.]web[.]core[.]windows[.]net/?_event=f8ffc4a739fa56774fcf4cb5b86e8066&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://w1edvewdacascsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uesde4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://enialist[.]pages[.]dev/
  •  hxxps://rtoiglkj-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://husfuson[.]online/index[.]php
  •  hxxps://iuslfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rc212asddasdasdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://winer23444[.]pages[.]dev/
  •  hxxps://d3fffghgfhfhfhfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gj13dgfgfdgdgdgd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://etwoik5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://sunpornojapanese[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtiougl[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://zcb2wa16tfjnmk[.]z13[.]web[.]core[.]windows[.]net/?_event=9acd80e8d55c3f665cb6521ae34f2df8&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://vnjitttre1[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://eiqurlerou7[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://thu233fsfsddfsdfsds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewuohj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://camvideoshub[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://troiygl5[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://gj7sadasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w12eadfcaedcasc[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reukyfuwj3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gj8sadasddassdasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rwuke2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th1221fdjgkdfgdfgfd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://keeuhbv5-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://mode-4io[.]pages[.]dev/
  •  hxxps://ewoirlpo3[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://micro-err-hammerhead-app-qb9x6[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://reiouf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://internet-2eg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdylosxphzp[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://rtoiglkj4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th11edafveafewf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://riulfkd[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://f4dsiyzcgiyagdscas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://conduct[.]pages[.]dev/
  •  hxxps://tronbkja8s4ed[.]z13[.]web[.]core[.]windows[.]net/?_event=0f20a81c50ad1d6a28f67e53bcdee75b&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://20204jsfvw992ai4bgm4vubx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://etwoik7-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewouerlk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://digitalseo[.]online/Helpline-customer-services/contact-support-now-customer-service/Security_check_error_os_window_macos_eng1_version2_system_level_verification_ensuring_compliance-secure/3Feb_Stjonas_win_mac_eng1/Wi011nhelpStjons307/index[.]html
  •  hxxps://hedddsv6[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://szawf13djnc2yvt8ie40buh6[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSjYrr0w061/index[.]html
  •  hxxps://rwuke9[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://twueoierul5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtiougl5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiurlyth2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriukhj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://arrulous[.]pages[.]dev/
  •  hxxps://troiygl5-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://gj14sadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uesde5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reoilkr1-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://oilal17[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://twueoierul-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reukyfuwj6-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://cellarbaazarview[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reqoiutqrl3[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://wiufdlkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqgulkf0-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rwiulwk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://f10rtdhsegeagseger[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronmjdc53wa[.]z13[.]web[.]core[.]windows[.]net/?_event=e189ab8ef29958a76c140cd652e47124&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://rwqulkgf6-secondary[.]z27[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://reioulfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://supertoolslayerweb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iuslfk1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://mivowited[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://baxtrontutorplan[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://develop[.]carolbike[.]com/?p=4ba6b8bf0b3f23ffa790c7e8d1372d5e&u=df8fa0691eda09444249425f4b4e0054405c5f1111130443545644110d101455185a5e084b5e0b430b514508084c07421b5d01145508114407090814075652565800441403
  •  hxxps://reqoiutqrl3-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://swapcozycradle[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eiurlyth2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewiuk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://23reeeew204tqq[.]z24[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://iuslfk2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://m8g0pixl9takevb2nqhc5j1f[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSjYrr0w061/index[.]html
  •  hxxps://desparations[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://etwoik-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tronblka4edbhs8[.]z13[.]web[.]core[.]windows[.]net/?_event=322752d02fcd8dffdc69ea1a11cc2aba&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://sexdchatasain[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://rewiuofrwlk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://6364ca08f1765eb2a18d8[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://aaogvsp02ne7x1dh[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-710-6516
  •  hxxps://wiufdlkj3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://thu324sdffsdfsddfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eiqurlerou7-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbfc8ukjn[.]z13[.]web[.]core[.]windows[.]net/?_event=8118b82295e0b862ab455b6f50c79129&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://twueoierul5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reioulfk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://keeuhbv5[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://wiufdlkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reiuglkfr1-secondary[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://reioulfk7-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vnjitttre1-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://gj9ghfghfhfghfghfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wed1wdasdassdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fellatiojapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://etwoik[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rtoiglkj3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriukhj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://aqt3v6214pg59ly[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-240-4877
  •  hxxps://fc5e47a90c1f30f74638[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d0qu6eregj5c739e0i90&sou=961b78c5e6864d316a2ad1d5c&cost=icloud&ip=icliud[.]com&7=69[.]253[.]164[.]233&8=&9=
  •  hxxps://fc5e47a90c1f30f74638[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dsjjdkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://mfa-liberty[.]sbs/
  •  hxxps://f3adgeafgwegewg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s1sadasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://japanwhores[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://hhodw48v0gymz5u[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-453-3290
  •  hxxps://kdfjsse41[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://n1df78gukjjh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eoliufr11-secondary[.]z1[.]web[.]core[.]windows[.]net/mervallmjerror01codeshtml/?bcda=1-844-590-4335
  •  hxxps://jinmm25[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://pockethirebestsx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://w6uyctdytdtufdyf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eiqurlerou3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uphemism[.]pages[.]dev/
  •  hxxps://iuslfk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gj3saasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reukyfuwj8-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://javtsunami[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://windows-security[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://f9ytytdtfyufytdyui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://oilal11[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://striptyglam[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://d1sadadasdasddad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriukhj3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w14dacasdcascas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://clarifications[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://partial[.]pages[.]dev/
  •  hxxps://ewtiougl5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriukhj6[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rwuke3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etwoik1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://yfrzjo19l3a5s76tpvx0hguq[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSjYrr0w061/index[.]html
  •  hxxps://roperty[.]pages[.]dev/
  •  hxxps://reukyfuwj4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://flicksignalloop[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reqoiutqrl4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewuohj2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiuglkfr1[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://mogging[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://reukyfuwj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://teriii5[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://eilfkihk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://20123cxfk7qzu9v63l3a13s3[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eiqurlerou5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s5sfhersgbergherhr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://hot-4rk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reiouf2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoilkr2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://sdddsssggghhhjjtttyyy[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://n9jhhjgjghgghgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th14davasdascacs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s13sfhrbegwersgewrr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bluvupratro[.]hauntil[.]my[.]id/win/us/static_w/media/speech[.]mp3
  •  hxxps://reoilkr5-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://twueoierul2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://watchjavporn[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://twueoierul4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://josrng4k3mh01df[.]z4[.]web[.]core[.]windows[.]net/?ph0nq=1-888-457-4015
  •  hxxps://tewouerlk0[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th12rtgjdgdtherh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w3sfvuogdsvdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://0dd9d936983d401dbb13[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rtoiglkj5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s12utdftydtudfyufyuf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://lecuritp146[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://y2gfddfdgdfgdfggd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronbfc3wa6t[.]z13[.]web[.]core[.]windows[.]net/?_event=7676b6ecd0d43d129afece39ee836a4f&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://mqzw425o9u3m[.]z4[.]web[.]core[.]windows[.]net/?ph0nq=1-888-482-8529
  •  hxxps://rtoiglkj5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqurlerou1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reukyfuwj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwuke4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://8cb329701ddc7443e9dc8[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://x1ghghgfhfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://surfacess[.]z13[.]web[.]core[.]windows[.]net/Mac08ShDMeEr0887x/index[.]html
  •  hxxps://w2ddasvaedvasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://hasizesanatvalueighlyhoughtah[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://fltklksjdkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html
  •  hxxps://ewtiougl1-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rwuke8-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://4d5c652bc6d145159a63[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronkjam8s5r[.]z13[.]web[.]core[.]windows[.]net/?_event=531b3030cb25731a4ab794b62b63d8b7&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://th4wrsgsrgsege[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://walrus-app-jwwlz[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1960
  •  hxxps://gj1gfhfhhfhfhbhhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eiqurlerou4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://thenewrxmxgefshthrmn-secondary[.]z35[.]web[.]core[.]windows[.]net/?tk=Z3oXCSruIOscfPh4zdUawQmx02n9T8jy
  •  hxxps://s10hfyufyfyfigiuu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://2rfsdgsgs02safa3[.]z13[.]web[.]core[.]windows[.]net/3d5gdfgrr5f[.]html
  •  hxxps://20319fk1q5lhzi52mmaku6zq[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://hedddsv6-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://ewuohj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://javguru[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://flamingoss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rabbitscams[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://iuslfk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reukyfuwj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ksktskdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://kilomanjardi[.]z13[.]web[.]core[.]windows[.]net/new[.]html
  •  hxxps://tewouerlk[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eilfkihk[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wqbdw[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1992
  •  hxxps://rtoiglkj76[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reioulfk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w5afsvdavadva[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th12234ssdfsdfsdfsddf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://d4ghhfhfhfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f1ergvrwvterfvr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eiqurlerou6-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewbfueg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://nyljcl[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://302275656b77350b8069[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rtoiglkj4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th8ifuyfuduydutduy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rwuke1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reioulfk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reukyfuwj-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reioulfk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s3tfyufyigiugoui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rewiuofrwlk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriukhj3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewiuk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rtoiglkj76-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s8etrhgergwegewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://gj6sdsfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://10134634283e072711d56[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://credesreder[.]z13[.]web[.]core[.]windows[.]net/new[.]html
  •  hxxps://tewouerlk00[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wizcamsasian[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://rwuke4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqgulkf[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewtiougl-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eilfkihk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reqoiutqrl4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s4uiugiuguogoio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f5etrgewgfewgfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewoirlpo5[.]z27[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://woodpeckers[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://ewuohj1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://zcb2wjhav76s4e[.]z13[.]web[.]core[.]windows[.]net/?_event=97ad611bfb00b0104695e7b1766e237c&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://iapewefelu[.]z19[.]web[.]core[.]windows[.]net/?subid=1fpil85c18r
  •  hxxps://tewiuk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tron14214kjuyhgt[.]z13[.]web[.]core[.]windows[.]net/?_event=7e39369330509c0c7088702d404fcb45&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://sea-lion-app-lzfj4[.]ondigitalocean[.]app/fiWihdfhhfhsjhdhvjsh1hdh/index[.]html?Aniph=1-877-593-8480
  •  hxxps://n8kjhgjhgjghjjgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pun565rtfhgfhfhfhfg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rewiuofrwlk7[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://technometrics[.]live/simplify-your-life-as-a-marketer/24x7[.]customer-services-help/Security_check_error_os_window_macos_eng1_version2_system_level_verification_ensuring_compliance-secure/3Feb_Stjonas_win_mac_eng1/Wi011nhelpStjons307/index[.]html
  •  hxxps://tewouerlk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uplq6v2m9gc150o4dzswb7hf[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSjYrr0w061/index[.]html
  •  hxxps://pun2332sdsaasfasfsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://lionfish-app-2-nvt4q[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1960
  •  hxxps://gj4sadasddasddassdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://harry-6wm[.]pages[.]dev/
  •  hxxps://uesde6-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eilfkihk-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://livesexasian[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://zapmobbinzero[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://secure-erroe-rx300-app-psb8r[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://twueoierul1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://usodinvikopla[.]z13[.]web[.]core[.]windows[.]net/f1724/index[.]html?clickid=d0q6urd5sqmc73bikea0
  •  hxxps://reiouf[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rwuke1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewouerlk00-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://w6asfdsvdsv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://twueoierul[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewouerlk0-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://error-octopus-app-dhnoz[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://trimiturekavuvinegl[.]islammals[.]my[.]id/win/index[.]php?vq=vSqbYUcvwzjHONlXUXhGxEQwYmFVa1BWelVEVXVlUXBHeWFKcXBoZFFMTXlaOUtrSHF4OVFUc0VFM3lIa2RHZElYYW9kOHZMSEtRQSs4a2ZpWGRwNGlCZmtVRW1zRmZ5Njg0NDV5WHZiTnR3Z3hmTHE5UmNQYWp6bXkzMU9RRE1rN3Y5VFM4azljSEpvSXRvN293OEhKaDRuUWhhWlQ3Q1BaTThjWWptNmZxU250eXZVU0JpblBhZ2x1VEVsMUVDeFdyWDlETG5ONTQ3NG0wZw==
  •  hxxps://eriukhj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewiuofrwlk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewouerlk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uesde13[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriukhj8-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://7224t3k5647f93eb7569[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://lioperdpor[.]z13[.]web[.]core[.]windows[.]net/new[.]html
  •  hxxps://reqoiutqrl6[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://windows-security-dnu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reioulfk7[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eroor-3xx03-urchin-app-zsacq[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://carribeancom[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://s1fvbrwfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://address-dg4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://uesde1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://e1250e[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://livebasesleek[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rwuke9-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javbuzz[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://reukyfuwj7-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwuke-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://instance-cgq[.]pages[.]dev/
  •  hxxps://billloter-image[.]pages[.]dev/
  •  hxxps://rtoiglkj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ndantisterbourroximaxumaowingimated[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://chillax-ct2[.]pages[.]dev/
  •  hxxps://reqoiutqrl5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twueoierul3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://likerloo[.]pages[.]dev/
  •  hxxps://showzenlakesstrip[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pun45654sdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriukhj8[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiouf1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://popinallup-v3y43[.]ondigitalocean[.]app/win939i89238932832jsjs/index[.]html?Aniph=1-808-219-1422
  •  hxxps://tewiuk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiqurlerou5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiqurlerou2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewoirlpo1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://rtoiglkj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tron65874uytre[.]z13[.]web[.]core[.]windows[.]net/?_event=4ca8f51a444d4bfca55870e505ada98b&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://rtoiglkj3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://nsadnisresieuhn[.]z13[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://34rfsdgdsgs04rsfa[.]z13[.]web[.]core[.]windows[.]net/sfe4ttedge454[.]html?ph0nq=+1-844-403-3342
  •  hxxps://c8pbsjtrhkfdzya[.]z19[.]web[.]core[.]windows[.]net/?ph0nq=1-888-374-2837
  •  hxxps://hui9986[.]github[.]io/vmhb/
  •  hxxps://s7ertghregwegwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://thicgrowcraftque[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reioulfk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronblka94edbh[.]z13[.]web[.]core[.]windows[.]net/?_event=d710e2c4f757b02432848422f8fb08d8&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://reukyfuwj7[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pixelatelaszip[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wiufdlkj3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbjka8s4ed6h6[.]z13[.]web[.]core[.]windows[.]net/?_event=097d03557a04d487a4464ba5b12dc943&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://twueoierul4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://javggnet[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://earth-2a3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://secure-squid-app-lpteb[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://eriukhj-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://dfgtgdff[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-2049
  •  hxxps://rewiuofrwlk7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eiurlyth1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tronb47856lokijuu[.]z13[.]web[.]core[.]windows[.]net/?_event=03d3cce44d42a56f76588855068dc776&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://reukyfuwj8[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eve5ewfgevsrgfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://kjfdklfkjd74-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://ewtiougl4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://x4sadasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s9utdtduydyfiyiyg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriukhj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://f12efvewfewfe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reiouf2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriukhj2[.]z26[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://rwuke6-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wedsgsdgds01sf[.]z22[.]web[.]core[.]windows[.]net/3d5gdfgrr5f[.]html
  •  hxxps://storage-eqk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://njitttre4-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://f9pyrl34ikzo[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuk-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfrthjk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1965
  •  hxxps://anifest[.]pages[.]dev/
  •  hxxps://iberal[.]pages[.]dev/
  •  hxxps://f13advljaduvada[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://jolly-river-0e20f6f10[.]6[.]azurestaticapps[.]net/cmldcdlcm-w/index[.]html
  •  hxxps://drtuberjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://roasting[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://reqoiutqrl6-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wiufdlkj4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eilfkihk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtoiglkj6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uesde4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weesing1-secondary[.]z30[.]web[.]core[.]windows[.]net/mervallmjerror01codeshtml/?bcda=852-3050-0368
  •  hxxps://loporildes[.]z13[.]web[.]core[.]windows[.]net/new[.]html
  •  hxxps://uesde5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde10-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rewiuofrwlk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weqirou3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://etwoik7[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tewiuk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://skdlkdkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://riulfkd-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde10[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbfcaz63w9[.]z13[.]web[.]core[.]windows[.]net/?_event=938bc2aa2db2970fb4626427e94a5953&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://th5ergregewgweg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eilfkihk0-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://w9tdhrsgesgege[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mgttttrl-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://avglejapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://kefmi2k3yajs[.]z19[.]web[.]core[.]windows[.]net/?ph0nq=1-888-515-3622
  •  hxxps://hedddsv4[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://vozaniersi[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://bweiulf-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://ewuohj1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iuslfk1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://stockrichspin[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eilfkihk0[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde11-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weigh[.]pages[.]dev/
  •  hxxps://rwuke5[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtiougl3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://teriii3-secondary[.]z7[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://eriukhj4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://failsoon[.]pages[.]dev/
  •  hxxps://f6uftdtyduyfyfiy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://o91y8a60ovc4hj5[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-632-2269
  •  hxxps://e0155e[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://f2wrofvhewuhfoeqwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rtoiglkj8-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://discount-4eh[.]pages[.]dev/
  •  hxxps://uesde2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://etwoik2[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://fapvidjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://minzsuanrtgtse[.]z13[.]web[.]core[.]windows[.]net/macupett/index[.]html
  •  hxxps://nablatrebunotr[.]islammals[.]my[.]id/win/index[.]php?vq=vtJR/3npe+QM3dGqxhhyeDJLdjQrZGtjQzl1aWlyaWVnWmZ4eUFZaWQwZDBUNy92bjlsb2lMSFZMZGw3d0ZTUUtLd21xUGN4Q2VnK0REaTN3d3Jlb2dNZ0sxd3NpRytZR1U2NTJvUWxYWHRMcDZ2cGVIcExlVnlzYUlpRDI3eUwyR3R3Q1JVVFhOd2VJMCtzb3QzZkRTWW8wWVI4QmNDWDRQVFdhUnBTaGRNbEJNZjB3N2R6MXN4ZzBOVk1IcFJSVHZocjlRRTNhT3FPL0FKeA==
  •  hxxps://wfbeh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1992
  •  hxxps://reiouf1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wsharchoryneomode[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://keen-67m[.]pages[.]dev/
  •  hxxps://reioulfk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://frontier-2hu[.]pages[.]dev/
  •  hxxps://cccnbc-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0400
  •  hxxps://eiqurlerou6[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etwoik3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmkdc7y[.]z13[.]web[.]core[.]windows[.]net/?_event=11e3e9ceb2cf107e87efda7914525d4d&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ewoirlpo4[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://rewiuofrwlk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://uesde12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w11tfyufyufyfiyio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://uesde11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://substantial-5nt[.]pages[.]dev/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.