2025-06-06 - Tech Support Scam - Phishing Capmapign Observation Alert

108 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 108 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://grapple-6cf[.]pages[.]dev/
  •  hxxps://m4jgchtgjhvghjj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wrqiulhh2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erilkeiru2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://x4asdasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wrqiulhh1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://f70a82eb558941b39109[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iufslkhd2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtiulk5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjdsfi-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fabrications[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://setupthekey[.]live/
  •  hxxps://drmeghanapande[.]com/?p=1c59e47ed8c6649af5e84e04448f66d8&u=0ab49aaff69f51151516150c16495805170308424c145c120309134250174c044f05095b165953125c0e125b554b53114c02570609014a5450565f475a510a005517545c09
  •  hxxps://imposing[.]pages[.]dev/
  •  hxxps://hofflersiporister[.]pages[.]dev/
  •  hxxps://ewiugkrl[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://firefox2433[.]github[.]io/fr/Wi0n0erSHaa0mpAlert037/index[.]html
  •  hxxps://w5ytytdtydytdfuty[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronbgv63es9i[.]z13[.]web[.]core[.]windows[.]net/?_event=40ae4336fa43a102f02338509f487263&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://trackm434[.]sg-host[.]com/en/dv[.]html?
  •  hxxps://ewiugkrl-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eirwulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ubside[.]pages[.]dev/
  •  hxxps://ksjfidid[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://water-atf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tronmjaks5r8u[.]z13[.]web[.]core[.]windows[.]net/?_event=74d2151af9eb424410cc6666b06bcb98&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://rqeiulkf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reqiuflk0-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://odium[.]pages[.]dev/
  •  hxxps://9932c11d85kv6ce389e0[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://applicables[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://ewiurlkf2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://window-security-alert-fafqgsh8h2hjeqg5[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://reqiuflk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://copovuwewi[.]z1[.]web[.]core[.]windows[.]net/?phone=KzEgKDg2NikgNzcxLTIyMjU=
  •  hxxps://copovuwewi[.]z1[.]web[.]core[.]windows[.]net/
  •  hxxps://x6sadsadasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://solar-ee0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://s11ytrtsytsdytsyt[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiurlkf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://iufslkhd6[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://9e12s56d815669dfb770[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://d1ssddfsfsdfsdfsfsdfs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tweiugkl2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a12gfghgfgfhhfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w4dtdutdutfufyui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://m1asfgrdthesdfhnr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewtiulk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulrk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiurlkf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriulgr[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ietlwkiue7[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th1tdtydytdyfyufyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://sequences[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://ietlwkiue4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eirwulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eoiyru-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://noister[.]pages[.]dev/
  •  hxxps://ewiugkrl3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://erwiuloi4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w64rhersgrgregre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t2fewdvdscasac[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reqiuflk-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a10asdasdasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiulrfk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a1ch9hsakjxjsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriulgr3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s6wrgrsgesgrgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w4sdfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronbfv5r3wqa[.]z13[.]web[.]core[.]windows[.]net/?_event=403a9ae614b527251bdd693e49b205a5&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://aw34redf45[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://a1dg8ad7gsajh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiugkrl2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wrqukfj2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
  •  hxxps://wrqukfj2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://x3sadasdasasdasdassa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://c7710a0aaa9a793401d99[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://collaborationss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://tpp3js0t8g5[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-944-6211
  •  hxxps://m10srfbesdgveds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w7yuddtdytdytdtd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://qermergynicesxyzylonewterbru[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rqeiulkf8[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://paybilldis[.]it[.]com/index[.]php
  •  hxxps://eriulgr-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://etiulrk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://b1050b[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://wyq23z7rspo[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-522-5087
  •  hxxps://m8yrfhrdffvdhrhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rqeiulkf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erilkeiru3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rqeiulkf8-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiruflk90[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eirwulk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://firewall-ak4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://errorzxmicrosxsxm01mx[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-403-3764
  •  hxxps://lecuritd131[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/visudk[.]mp4
  •  hxxps://n8dj7wssdcj[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-533-4879
  •  hxxps://x2sadasdadadasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reqiuflk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulrk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mj555avee5b[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-491-5267
  •  hxxps://ewiugkrl4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://13fd5bbd490a4f5c9469[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://erilkeiru5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://indication[.]pages[.]dev/
  •  hxxps://eooiuunb5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://server-56j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://a13hgjhjgvjhgjggjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pkjdkskdksd[.]azurewebsites[.]net/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://eriulgr4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiulrfk4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiulrfk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eisuflk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://utretiadkevaf[.]z13[.]web[.]core[.]windows[.]net/f1724/index[.]html?clickid=d10v7pt5sqmc73brs51g
  •  hxxps://w9ifufutfuyyfuyiugy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://security-bhf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eoiyru2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://windows-security-gghf440505405[.]pages[.]dev/
  •  hxxps://eriulgr5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eoiyru2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweiugkl1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reqiuflk7-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://trackm432[.]sg-host[.]com/en/dv[.]html
  •  hxxps://lecurita150[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://geriatherseopleirtesidenmilds[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://tronbkjma8s4e2q[.]z13[.]web[.]core[.]windows[.]net/?_event=02d9b1df824c05d0d6781cba1e0fd873&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://tweiugkl5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a2asdasdsddaasa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eirwulk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://x8asasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t12eafdceadfcwqassfd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s2egrgegewfwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eooiuunb11[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiugkrl2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tronbfc63w8l[.]z13[.]web[.]core[.]windows[.]net/?_event=588f3308ef61d125e6012f44a9989f1e&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://reqiuflk7[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s17ffggfhffgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://laptop-29b[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tweiugkl1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtiulk5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w1rwhetghewgewge[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://erilkeiru4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulrk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://t13egewfewfewf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://mango-a9e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eooiuunb10[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wirudsalkdj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb3[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://noisetering[.]pages[.]dev/
  •  hxxps://eooiuunb8-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rqeiulkf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eoiyru3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://esdiugfkj4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pervade[.]pages[.]dev/
  •  hxxps://f7uyytdtydutduyfiy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eisuflk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://m5dytdydudutdstufduiyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ietlwkiue5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronjkams75rd67[.]z13[.]web[.]core[.]windows[.]net/?_event=01671ab1370609fe9969334a0208cd44&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://tronbjka8s4ed5rk[.]z13[.]web[.]core[.]windows[.]net/?_event=e7b47fca35e4f983b4a2e7d7541c102a&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://eooiuunb11-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://trackm430[.]sg-host[.]com/en/new[.]html
  •  hxxps://tronbjkma8s5rd[.]z13[.]web[.]core[.]windows[.]net/?_event=abd991180bef7ec59d4745ab4f79bae1&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ewiuk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://th4uycduyfyifguo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://bookingservice[.]info/
  •  hxxps://reqiuflk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://windows-security-ghgh15414551[.]pages[.]dev/
  •  hxxps://w8iugyfuyffuyfyio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x1sadasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://images-c03[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://a15ghhghgghfghfgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://hno-dresden[.]org/?p=d070a90c46d2d373d47597dede7d19d1&u=ea22f320a49f0e474640120e1649075744550f404c140340505f1440501713561c530e5916590c400f581559554b00411f54514201085357030058455a5155570041505c5e
  •  hxxps://rqeiulkf5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ietlwkiue1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://cloud-5p1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://x5fghghgfhfhfghfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w1dsdssdfsdsdsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://reqiuflk[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuk0[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w2ytdytdtufyfyii[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s5hgfhfgghfhfgfhgfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://y2hggfffghfghghfgfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eooiuunb7[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erilkeiru5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://domain-e52[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://w5ssdsdfsdfsddfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriulgr5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trackm435[.]sg-host[.]com/en/dv[.]html
  •  hxxps://tronblmk94asz2[.]z13[.]web[.]core[.]windows[.]net/?_event=69ca4ee32f5a2a8a56693265ea6652cf&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://w2asdsadsafasfsadas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w6dffdggfasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiruflk0[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ietlwkiue5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s1sadasdasdasdsasas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ietlwkiue3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s8sdfsdfsdfsdfsddf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://etiulrk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a3ghgfhfhfhfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ietlwkiue4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://w1jkjhkhjkhkhkhkh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rqeiulkf5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erwiuloi-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://windowscoresecurityalert0054412544lk4[.]pages[.]dev/
  •  hxxps://gethelpoj02[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://seuritr-app-h8dpb9b4fng3cka6[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://hammm7[.]z28[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
  •  hxxps://ewiuk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s2hjbhgjhgjhgjghjghjhj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w12hgchgchchgchg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://windows-security-0021445f5g1f5h1f5b1f514f5[.]pages[.]dev/
  •  hxxps://tronmjaks85r3w[.]z13[.]web[.]core[.]windows[.]net/?_event=115608bc39243cc28424078fcbb9352d&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://water-6zv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rqeiulkf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://arrulous[.]pages[.]dev/
  •  hxxps://windows-alert-attack-0025441[.]pages[.]dev/
  •  hxxps://network-4ie[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kjdsfi[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiruflk0-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tweiugkl5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://secureity-po-app-bvfgf3ewhhbfe7g4[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://eirwulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://x9jhkgjghgjgjgjhggj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eirwulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://proprietary[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rqeiulkf1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://erilkeiru3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbkja4es7bf[.]z13[.]web[.]core[.]windows[.]net/?_event=2d76b0d0f0f2ccb81ca7eab691f436c4&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://s9jhshgjdsfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://qf2j0b3wfvk[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-811-3164
  •  hxxps://qf2j0b3wfvk[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-673-8971
  •  hxxps://a7hjhgjghjghjghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://understandingss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://w3dsdfsdfsdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewtiulk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbjkans75r[.]z13[.]web[.]core[.]windows[.]net/?_event=1a527645aec1a5cf0d9b985800bdbaa0&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ewiugkrl4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s3sadasdasdassdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s1sadassdadasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://erilkeiru4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://relationshipcoach[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rqeiulkf7[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://t10rfvewfewfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://corewinalert48sd53ie[.]pages[.]dev/
  •  hxxps://jellyfish-app-d8ops[.]ondigitalocean[.]app/
  •  hxxps://alsumanasrcxuckmuslabiwanam[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://beguile[.]pages[.]dev/
  •  hxxps://service-aoh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eirwulk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reqiuflk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://sweepsex[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://wirudsalkdj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://m9iydytdutfyigfiuo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://a5ghgfhfghhfhffgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://keyboard-5f1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://th8uyvtrctrctyvytvuy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erilkeiru1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reqiuflk0[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://a11gffghgffghhggf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th5vftvfvbygbgyb[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://erilkfj5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://esdiugfkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiuk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s12asadasdasdasdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiugkrl1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rqeiulkf1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://siontoti[.]z38[.]web[.]core[.]windows[.]net/
  •  hxxps://w11dr5tvtybybhunhubfc[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s14sadasdassdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t1rwgwsfevfwefe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://alertwindowshome7852sd9xe3[.]pages[.]dev/
  •  hxxps://m2rshgesgeagrshgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tweiugkl2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wrqukfj2[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
  •  hxxps://program-3ss[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewiulrfk4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbdjkma8s5rc6[.]z13[.]web[.]core[.]windows[.]net/?_event=181f8b275008ec4743d9a4120286117a&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://win060527vfjhfvhj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://errorzxmicrosxz01x[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-403-3764
  •  hxxps://f11wrhethtrhtr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://www[.]pabilerss[.]xyz/index[.]php
  •  hxxps://uphemism[.]pages[.]dev/
  •  hxxps://malice[.]pages[.]dev/
  •  hxxps://wq0zjtx56ov8kh42rpeuami3[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
  •  hxxps://ewiulrfk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eirwulk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulrk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ietlwkiue8[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://camsodajapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://reqiuflk6-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb9[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiulrfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://storage-9sp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reqiuflk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiruflk90-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://apples-alert-security-0021455[.]pages[.]dev/
  •  hxxps://eooiuunb3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://t4ewsgdsrgagsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tweiugkl3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eirwulk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://tweiugkl4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eoiyru[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://zcb2wjkmafc74e[.]z13[.]web[.]core[.]windows[.]net/?_event=0c6121e5dc86935d6bc5899335c7803e&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://eriulgr1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://esdiugfkj4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiurlkf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s5sfhersgbergherhr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://money-37h[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://s13sfhrbegwersgewrr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eooiuunb12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ustretiakoepcla-secondary[.]z13[.]web[.]core[.]windows[.]net/ss3481/index[.]html?clickid=d0v18tl5sqmc73bnfrn0
  •  hxxps://iufslkhd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erilkfj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiurlkf2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://zcb2was8s5rfkl[.]z13[.]web[.]core[.]windows[.]net/?_event=d6cb2f886add3141484c12cd842b8935&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://endow-1j7[.]pages[.]dev/
  •  hxxps://th9rexrdcrdcftrvtfv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://chrome-aae[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewiulrfk0-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s12utdftydtudfyufyuf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s16sdsdasasaaafaas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ytasdtuyt6576as[.]z21[.]web[.]core[.]windows[.]net/Mac08ShDMeEr0887/index[.]html
  •  hxxps://window-cnz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewiurlkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eooiuunb1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://pf72cspsfn3[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-652-3961
  •  hxxps://3001um5exdknx7owa35zcap6[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rqeiulkf[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://n1g87gsaxbjsabh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eooiuunb10-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://c014hoty9mf5pjqvngwxubrd[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
  •  hxxps://ietlwkiue3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://security-plush-x394x-app-e2cae2aph2ccgegp[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://besiege-a6i[.]pages[.]dev/
  •  hxxps://ewiugkrl5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s10hfyufyfyfigiuu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ddddffffssssggghhhmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://data-77a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wrqiulhh2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nomadsesa[.]pages[.]dev/
  •  hxxps://paybilldom[.]it[.]com/index[.]php
  •  hxxps://s7sdfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewtiulk4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rlmno1n67qi[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-928-5612
  •  hxxps://s13sadasdasdasdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://pabilerss[.]online/
  •  hxxps://reqiuflk6[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gwd0fxhai1kvmp2o4j8tnl9e[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
  •  hxxps://s2hjghjgjgjgjgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://drrrssssddddfffhhhklm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronmjaf5rs7yd[.]z13[.]web[.]core[.]windows[.]net/?_event=1f7ebbba75b6fe328b4750f807b3e4e4&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://worker-98w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://w3wrhftdrgesrhrehtr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t8dfuicgewgfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriulgr1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rqeiulkf7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://erwiuloi4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eooiuunb5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://trackm423[.]sg-host[.]com/en/new[.]html
  •  hxxps://mentverol[.]z38[.]web[.]core[.]windows[.]net/
  •  hxxps://ewiulrfk3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiurlkf5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://image-plg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hcvatron[.]github[.]io/foodrecipe/Wi010nh1delpAml042/index[.]html
  •  hxxps://eooiuunb8[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiurlkf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://m12hfutdtydutdutu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eisuflk3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://game-edc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eooiuunb7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://keyword-ex0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://s3tfyufyigiugoui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rave-2vj[.]pages[.]dev/
  •  hxxps://storage-u4u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://a5gdfdgfdfgdgfgfggf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eirwulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kompletevorrspielvideoss[.]z1[.]web[.]core[.]windows[.]net/
  •  hxxps://s8etrhgergwegewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://microsoof-lobster-app-7yhnw[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://iufslkhd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wrqiulhh4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a2dsdasddasdasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://a8shshjashgjgjgjsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://a14gdffdgdfgdgfdfgd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s10ssadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiurlkf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://m7uytdytdtdyujyu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s4uiugiuguogoio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://th3udfudutduuyfuyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiulrfk0[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ebc5e955563e40785ce09[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtiulk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a6sdadasddassdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiulrfk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reqiuflk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://a7sdsdasdasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eirwulk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://wrqiulhh4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiurlkf5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://d2sdasdasdasdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://car-rn9[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewtiulk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eooiuunb2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://windows-security-alert-002145gg[.]pages[.]dev/
  •  hxxps://host-aoq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tritronaridipruvi[.]distrates[.]my[.]id/win/index[.]php?vq=Wc6HoCrROTb3d0Dnkus0xGI4RDRlMmJDWmswQWduR0tpSjNZSkJYOEZaMVpYV05VeVQxS2ZZdCswWUpEN2pZc0xKUHNiSFJhRjFwRVdvNkNWQkEvcDRNendzaHlwbjg1SlMzR1FSTlZ5ZEhzMWxwL2x2TjVuNXpSQWk2Q1RmM0FLbHRGLzB6RG54b1hLdU9sbEVEalRacmlDNWRMVnlWcGxjem80UWE2b3oxdU5jVXJVc0pBaFFuaytRVk53NWFwajZPdkQ2S0dwMzhwb1NqWg==
  •  hxxps://bidtrrvolling[.]pages[.]dev/
  •  hxxps://eooiuunb9-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rulayazuua[.]z14[.]web[.]core[.]windows[.]net/
  •  hxxps://beyma-hosteleria[.]es/?p=6b87588f7dd6fb7fb00965d673ea0cc6&u=ea5b6ae9297b5e1511494103184d5705135c5c4d421053120756474d5e1343044b5a5d54185d5c12585146545b4f5013485d024c5c14445454090b4854550558540c5a4a07
  •  hxxps://straem[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://erilkeiru1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trackm425[.]sg-host[.]com/en/new[.]html
  •  hxxps://tronbhjm8u7[.]z13[.]web[.]core[.]windows[.]net/?_event=eab3f0a5d938e7d0b525648f940d2779&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ewiulrfk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pabilerss[.]xyz/
  •  hxxps://f8uigfyfuyfyfiyguo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://erwiuloi[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ietlwkiue1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s11adsadasddadassda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ietlwkiue8-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eooiuunb2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://reqiuflk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://ewiuk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rqeiulkf-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://gghdjh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://music-ayn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://w8hjgghjhgjghjjghghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulgr2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://s1fvbrwfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://rqeiulkf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://eriulgr3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a9jkhkhjkhjkjhkjhkhjkh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t6cydytdtufyufyiu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://zcb2wkjan7y6t[.]z13[.]web[.]core[.]windows[.]net/?_event=ed6e8a0d2ac41cd0946bef91a55b9e84&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ewiugkrl5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://engine-5ja[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://etiulrk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fhuuu1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulgr2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wrqukfj[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
  •  hxxps://wrqukfj[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
  •  hxxps://inntess[.]pages[.]dev/
  •  hxxps://7f33120b4h794351b860[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eooiuunb6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulrk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s15sadsadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://t9wfiewhufgewew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s7ertghregwegwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://etiulrk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://w10gcyxrtrcytcytctytu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://symmetry-8by[.]pages[.]dev/
  •  hxxps://rqeiulkf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jugglingup[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://tronjkams85rd6[.]z13[.]web[.]core[.]windows[.]net/?_event=60f3aab370e8d3065b0eec3a3e4406e1&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
  •  hxxps://iufslkhd6-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://rqeiulkf6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://m6fuyddtydfuyfyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://fhuuu1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th2uyfudfudfuydfuyfyfyii[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://secure-squid-app-lpteb[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://eriulgr4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://5339f7aeb4994dc98189[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tweiugkl3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://s9utdtduydyfiyiyg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiugkrl1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://money-3tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://a4sdasddadassdsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://esdiugfkj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://esdiugfkj3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eisuflk3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://porusecure-x40c-app-epb8b2f6bwfsadfv[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://ewtiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eirwulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://th6gtvfvfvfvgy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eirwuf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://t3uffcttydfytfutfugv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eooiuunb4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://a8hjghjghjghjghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://iufslkhd1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://elude-933[.]pages[.]dev/
  •  hxxps://tronjkm94eaxs[.]z13[.]web[.]core[.]windows[.]net/?_event=a03cec254d00f397675edd6b5cace40d&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://a4asdasdasdada[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://x3asdasdasdadassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronbfc73wakj[.]z13[.]web[.]core[.]windows[.]net/?_event=f7bbba1cce02894634971234f177a3af&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://01c08hju4195h3f39f250[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://windows-security-5ti[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wrqiulhh5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://t11wefewfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://nisrtodot[.]pages[.]dev/
  •  hxxps://ewtiulk4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trackm433[.]sg-host[.]com/en/new[.]html?
  •  hxxps://rqeiulkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://pgulyc3dhm9vnik2q675b0s4[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
  •  hxxps://eoiyru1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eisuflk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1k56ab911a2542c6bda0[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://construe[.]pages[.]dev/
  •  hxxps://tablet-4rd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://xhyurmarburgyushwarnashman[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://eirwuf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://t5ufdytdytdytdutfu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://iufslkhd1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://o07aya5k4i2[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-508-6269
  •  hxxps://eoiyru1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://zcb2w6ed7cxh7y[.]z13[.]web[.]core[.]windows[.]net/?_event=444b9c9936bab31e94a9439386f39407&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://project-23u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eooiuunb6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://network-37d[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://m13jhftdtdtduu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiuk0-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://screen-exw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ae96wnv69ow[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-308-9481
  •  hxxps://wrqiulhh1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a6gghgfgfhgfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://w7gjhgjgjgjjgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://f10utyd6td65ff86[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ietlwkiue[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iufslkhd2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://x7adasdasdasdasdsadas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://tronmjaks5rd7y[.]z13[.]web[.]core[.]windows[.]net/?_event=5921b6c4afbd46463aa3aeaef638e100&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://dssddddsssffffrrrrggghh[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://ewtiulk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://m3fdytdtudyifiugo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://snow-43j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://trackm426[.]sg-host[.]com/en/new[.]html?
  •  hxxps://ewiurlkf1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://2ce9608121b84897bb00[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d10dbmvk5mqs73fha82g&sou=6b27c2829a672d05ac523ce4c&cost=top%20games&ip=itchi[.]io&7=76[.]209[.]193[.]172&8=&9=
  •  hxxps://ietlwkiue7-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wrqiulhh3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cold-418[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://th7rddrtyyyubyu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://s3sadasdasdasdasas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://wqnfue[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
  •  hxxps://zcb2wjknam7s5r[.]z13[.]web[.]core[.]windows[.]net/?_event=768bba3817be5c49a1912a1f45f9f0d3&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://v25n1jwjbq3[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-522-5087
  •  hxxps://tronbkamsfc64e[.]z13[.]web[.]core[.]windows[.]net/?_event=431a4aec278aedb2e4025d4763961a3c&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://reqiuflk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://coachings[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
  •  hxxps://hammm7-secondary[.]z28[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
  •  hxxps://tweiugkl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ietlwkiue-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
  •  hxxps://y1ghhggfhfggfgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiugkrl3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.