108 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 108 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://grapple-6cf[.]pages[.]dev/
- hxxps://m4jgchtgjhvghjj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://wrqiulhh2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erilkeiru2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://x4asdasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://wrqiulhh1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://f70a82eb558941b39109[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://iufslkhd2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewtiulk5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kjdsfi-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fabrications[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://setupthekey[.]live/
- hxxps://drmeghanapande[.]com/?p=1c59e47ed8c6649af5e84e04448f66d8&u=0ab49aaff69f51151516150c16495805170308424c145c120309134250174c044f05095b165953125c0e125b554b53114c02570609014a5450565f475a510a005517545c09
- hxxps://imposing[.]pages[.]dev/
- hxxps://hofflersiporister[.]pages[.]dev/
- hxxps://ewiugkrl[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://firefox2433[.]github[.]io/fr/Wi0n0erSHaa0mpAlert037/index[.]html
- hxxps://w5ytytdtydytdfuty[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tronbgv63es9i[.]z13[.]web[.]core[.]windows[.]net/?_event=40ae4336fa43a102f02338509f487263&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://trackm434[.]sg-host[.]com/en/dv[.]html?
- hxxps://ewiugkrl-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eirwulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ubside[.]pages[.]dev/
- hxxps://ksjfidid[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
- hxxps://water-atf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tronmjaks5r8u[.]z13[.]web[.]core[.]windows[.]net/?_event=74d2151af9eb424410cc6666b06bcb98&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://rqeiulkf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://reqiuflk0-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://odium[.]pages[.]dev/
- hxxps://9932c11d85kv6ce389e0[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://applicables[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://ewiurlkf2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://window-security-alert-fafqgsh8h2hjeqg5[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
- hxxps://reqiuflk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://copovuwewi[.]z1[.]web[.]core[.]windows[.]net/?phone=KzEgKDg2NikgNzcxLTIyMjU=
- hxxps://copovuwewi[.]z1[.]web[.]core[.]windows[.]net/
- hxxps://x6sadsadasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://solar-ee0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://s11ytrtsytsdytsyt[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiurlkf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://iufslkhd6[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://9e12s56d815669dfb770[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://d1ssddfsfsdfsdfsfsdfs[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tweiugkl2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a12gfghgfgfhhfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w4dtdutdutfufyui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://m1asfgrdthesdfhnr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewtiulk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulrk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiurlkf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eriulgr[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ietlwkiue7[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://th1tdtydytdyfyufyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://sequences[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://ietlwkiue4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eirwulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eoiyru-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://noister[.]pages[.]dev/
- hxxps://ewiugkrl3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://erwiuloi4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://w64rhersgrgregre[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t2fewdvdscasac[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://reqiuflk-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a10asdasdasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiulrfk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a1ch9hsakjxjsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eriulgr3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s6wrgrsgesgrgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w4sdfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tronbfv5r3wqa[.]z13[.]web[.]core[.]windows[.]net/?_event=403a9ae614b527251bdd693e49b205a5&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://aw34redf45[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://a1dg8ad7gsajh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiugkrl2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://wrqukfj2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
- hxxps://wrqukfj2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
- hxxps://x3sadasdasasdasdassa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://c7710a0aaa9a793401d99[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://collaborationss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://tpp3js0t8g5[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-944-6211
- hxxps://m10srfbesdgveds[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w7yuddtdytdytdtd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://qermergynicesxyzylonewterbru[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://rqeiulkf8[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://paybilldis[.]it[.]com/index[.]php
- hxxps://eriulgr-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://etiulrk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b1050b[.]z21[.]web[.]core[.]windows[.]net/
- hxxps://wyq23z7rspo[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-522-5087
- hxxps://m8yrfhrdffvdhrhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://rqeiulkf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erilkeiru3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rqeiulkf8-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiruflk90[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eirwulk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://firewall-ak4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://errorzxmicrosxsxm01mx[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-403-3764
- hxxps://lecuritd131[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/visudk[.]mp4
- hxxps://n8dj7wssdcj[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-533-4879
- hxxps://x2sadasdadadasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://reqiuflk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulrk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://mj555avee5b[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-491-5267
- hxxps://ewiugkrl4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://13fd5bbd490a4f5c9469[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://erilkeiru5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://indication[.]pages[.]dev/
- hxxps://eooiuunb5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://server-56j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://a13hgjhjgvjhgjggjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pkjdkskdksd[.]azurewebsites[.]net/Wi010nh1delpS0mAm032/index[.]html
- hxxps://eriulgr4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiulrfk4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiulrfk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eisuflk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://utretiadkevaf[.]z13[.]web[.]core[.]windows[.]net/f1724/index[.]html?clickid=d10v7pt5sqmc73brs51g
- hxxps://w9ifufutfuyyfuyiugy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://security-bhf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eoiyru2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://windows-security-gghf440505405[.]pages[.]dev/
- hxxps://eriulgr5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eoiyru2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweiugkl1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reqiuflk7-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://trackm432[.]sg-host[.]com/en/dv[.]html
- hxxps://lecurita150[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://geriatherseopleirtesidenmilds[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://tronbkjma8s4e2q[.]z13[.]web[.]core[.]windows[.]net/?_event=02d9b1df824c05d0d6781cba1e0fd873&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://tweiugkl5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a2asdasdsddaasa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eirwulk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://x8asasdasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t12eafdceadfcwqassfd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s2egrgegewfwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eooiuunb11[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiugkrl2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://tronbfc63w8l[.]z13[.]web[.]core[.]windows[.]net/?_event=588f3308ef61d125e6012f44a9989f1e&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://reqiuflk7[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s17ffggfhffgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://laptop-29b[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tweiugkl1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewtiulk5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://w1rwhetghewgewge[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://erilkeiru4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulrk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://t13egewfewfewf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://mango-a9e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eooiuunb10[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://wirudsalkdj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb3[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://noisetering[.]pages[.]dev/
- hxxps://eooiuunb8-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://rqeiulkf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eoiyru3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esdiugfkj4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://pervade[.]pages[.]dev/
- hxxps://f7uyytdtydutduyfiy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eisuflk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://m5dytdydudutdstufduiyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ietlwkiue5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkams75rd67[.]z13[.]web[.]core[.]windows[.]net/?_event=01671ab1370609fe9969334a0208cd44&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://tronbjka8s4ed5rk[.]z13[.]web[.]core[.]windows[.]net/?_event=e7b47fca35e4f983b4a2e7d7541c102a&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://eooiuunb11-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://trackm430[.]sg-host[.]com/en/new[.]html
- hxxps://tronbjkma8s5rd[.]z13[.]web[.]core[.]windows[.]net/?_event=abd991180bef7ec59d4745ab4f79bae1&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ewiuk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://th4uycduyfyifguo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://bookingservice[.]info/
- hxxps://reqiuflk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://windows-security-ghgh15414551[.]pages[.]dev/
- hxxps://w8iugyfuyffuyfyio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x1sadasdasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://images-c03[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://a15ghhghgghfghfgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://hno-dresden[.]org/?p=d070a90c46d2d373d47597dede7d19d1&u=ea22f320a49f0e474640120e1649075744550f404c140340505f1440501713561c530e5916590c400f581559554b00411f54514201085357030058455a5155570041505c5e
- hxxps://rqeiulkf5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ietlwkiue1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://cloud-5p1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://x5fghghgfhfhfghfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w1dsdssdfsdsdsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://reqiuflk[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuk0[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://w2ytdytdtufyfyii[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s5hgfhfgghfhfgfhgfhg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://y2hggfffghfghghfgfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eooiuunb7[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erilkeiru5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://domain-e52[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://w5ssdsdfsdfsddfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eriulgr5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trackm435[.]sg-host[.]com/en/dv[.]html
- hxxps://tronblmk94asz2[.]z13[.]web[.]core[.]windows[.]net/?_event=69ca4ee32f5a2a8a56693265ea6652cf&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://w2asdsadsafasfsadas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w6dffdggfasdasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiruflk0[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ietlwkiue5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s1sadasdasdasdsasas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ietlwkiue3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s8sdfsdfsdfsdfsddf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://etiulrk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a3ghgfhfhfhfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ietlwkiue4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://w1jkjhkhjkhkhkhkh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://rqeiulkf5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erwiuloi-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://windowscoresecurityalert0054412544lk4[.]pages[.]dev/
- hxxps://gethelpoj02[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://seuritr-app-h8dpb9b4fng3cka6[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
- hxxps://hammm7[.]z28[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
- hxxps://ewiuk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s2hjbhgjhgjhgjghjghjhj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w12hgchgchchgchg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://windows-security-0021445f5g1f5h1f5b1f514f5[.]pages[.]dev/
- hxxps://tronmjaks85r3w[.]z13[.]web[.]core[.]windows[.]net/?_event=115608bc39243cc28424078fcbb9352d&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://water-6zv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rqeiulkf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://arrulous[.]pages[.]dev/
- hxxps://windows-alert-attack-0025441[.]pages[.]dev/
- hxxps://network-4ie[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://kjdsfi[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiruflk0-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://tweiugkl5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://secureity-po-app-bvfgf3ewhhbfe7g4[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
- hxxps://eirwulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://x9jhkgjghgjgjgjhggj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eirwulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://proprietary[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://rqeiulkf1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://erilkeiru3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbkja4es7bf[.]z13[.]web[.]core[.]windows[.]net/?_event=2d76b0d0f0f2ccb81ca7eab691f436c4&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://s9jhshgjdsfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://qf2j0b3wfvk[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-811-3164
- hxxps://qf2j0b3wfvk[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-673-8971
- hxxps://a7hjhgjghjghjghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://understandingss[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://w3dsdfsdfsdfsdfsdfsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewtiulk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbjkans75r[.]z13[.]web[.]core[.]windows[.]net/?_event=1a527645aec1a5cf0d9b985800bdbaa0&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ewiugkrl4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s3sadasdasdassdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s1sadassdadasdas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://erilkeiru4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://relationshipcoach[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://rqeiulkf7[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://t10rfvewfewfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://corewinalert48sd53ie[.]pages[.]dev/
- hxxps://jellyfish-app-d8ops[.]ondigitalocean[.]app/
- hxxps://alsumanasrcxuckmuslabiwanam[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://beguile[.]pages[.]dev/
- hxxps://service-aoh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eirwulk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://reqiuflk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://sweepsex[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://wirudsalkdj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://m9iydytdutfyigfiuo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://a5ghgfhfghhfhffgh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://keyboard-5f1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://th8uyvtrctrctyvytvuy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erilkeiru1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://reqiuflk0[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://a11gffghgffghhggf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th5vftvfvbygbgyb[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://erilkfj5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esdiugfkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiuk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s12asadasdasdasdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiugkrl1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rqeiulkf1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://siontoti[.]z38[.]web[.]core[.]windows[.]net/
- hxxps://w11dr5tvtybybhunhubfc[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s14sadasdassdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t1rwgwsfevfwefe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://alertwindowshome7852sd9xe3[.]pages[.]dev/
- hxxps://m2rshgesgeagrshgr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tweiugkl2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wrqukfj2[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
- hxxps://program-3ss[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewiulrfk4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbdjkma8s5rc6[.]z13[.]web[.]core[.]windows[.]net/?_event=181f8b275008ec4743d9a4120286117a&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://win060527vfjhfvhj[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://errorzxmicrosxz01x[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpMxjcErr0t74/index[.]html?ph0ne=1-844-403-3764
- hxxps://f11wrhethtrhtr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://www[.]pabilerss[.]xyz/index[.]php
- hxxps://uphemism[.]pages[.]dev/
- hxxps://malice[.]pages[.]dev/
- hxxps://wq0zjtx56ov8kh42rpeuami3[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://ewiulrfk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eirwulk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulrk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ietlwkiue8[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://camsodajapan[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://reqiuflk6-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb9[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiulrfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://storage-9sp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://reqiuflk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiruflk90-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://apples-alert-security-0021455[.]pages[.]dev/
- hxxps://eooiuunb3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://t4ewsgdsrgagsd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tweiugkl3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eirwulk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://tweiugkl4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eoiyru[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://zcb2wjkmafc74e[.]z13[.]web[.]core[.]windows[.]net/?_event=0c6121e5dc86935d6bc5899335c7803e&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://eriulgr1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://esdiugfkj4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiurlkf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s5sfhersgbergherhr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://money-37h[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://s13sfhrbegwersgewrr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eooiuunb12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ustretiakoepcla-secondary[.]z13[.]web[.]core[.]windows[.]net/ss3481/index[.]html?clickid=d0v18tl5sqmc73bnfrn0
- hxxps://iufslkhd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erilkfj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiurlkf2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://zcb2was8s5rfkl[.]z13[.]web[.]core[.]windows[.]net/?_event=d6cb2f886add3141484c12cd842b8935&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://endow-1j7[.]pages[.]dev/
- hxxps://th9rexrdcrdcftrvtfv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://chrome-aae[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewiulrfk0-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s12utdftydtudfyufyuf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s16sdsdasasaaafaas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ytasdtuyt6576as[.]z21[.]web[.]core[.]windows[.]net/Mac08ShDMeEr0887/index[.]html
- hxxps://window-cnz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewiurlkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eooiuunb1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://pf72cspsfn3[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-652-3961
- hxxps://3001um5exdknx7owa35zcap6[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://rqeiulkf[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://n1g87gsaxbjsabh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eooiuunb10-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://c014hoty9mf5pjqvngwxubrd[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://ietlwkiue3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://security-plush-x394x-app-e2cae2aph2ccgegp[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
- hxxps://besiege-a6i[.]pages[.]dev/
- hxxps://ewiugkrl5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s10hfyufyfyfigiuu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ddddffffssssggghhhmmmmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://data-77a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://wrqiulhh2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nomadsesa[.]pages[.]dev/
- hxxps://paybilldom[.]it[.]com/index[.]php
- hxxps://s7sdfsdfsdfsdfsdf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewtiulk4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rlmno1n67qi[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-928-5612
- hxxps://s13sadasdasdasdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://pabilerss[.]online/
- hxxps://reqiuflk6[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://gwd0fxhai1kvmp2o4j8tnl9e[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://s2hjghjgjgjgjgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://drrrssssddddfffhhhklm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tronmjaf5rs7yd[.]z13[.]web[.]core[.]windows[.]net/?_event=1f7ebbba75b6fe328b4750f807b3e4e4&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://worker-98w[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://w3wrhftdrgesrhrehtr[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t8dfuicgewgfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eriulgr1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://rqeiulkf7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://erwiuloi4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eooiuunb5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://trackm423[.]sg-host[.]com/en/new[.]html
- hxxps://mentverol[.]z38[.]web[.]core[.]windows[.]net/
- hxxps://ewiulrfk3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiurlkf5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://image-plg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://hcvatron[.]github[.]io/foodrecipe/Wi010nh1delpAml042/index[.]html
- hxxps://eooiuunb8[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiurlkf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://m12hfutdtydutdutu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eisuflk3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://game-edc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eooiuunb7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://keyword-ex0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://s3tfyufyigiugoui[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://rave-2vj[.]pages[.]dev/
- hxxps://storage-u4u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://a5gdfdgfdfgdgfgfggf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eirwulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kompletevorrspielvideoss[.]z1[.]web[.]core[.]windows[.]net/
- hxxps://s8etrhgergwegewgwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://microsoof-lobster-app-7yhnw[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://iufslkhd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://wrqiulhh4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a2dsdasddasdasdasda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://a8shshjashgjgjgjsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://a14gdffdgdfgdgfdfgd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s10ssadasdasdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiurlkf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://m7uytdytdtdyujyu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s4uiugiuguogoio[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://th3udfudutduuyfuyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiulrfk0[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ebc5e955563e40785ce09[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ewtiulk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a6sdadasddassdassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiulrfk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reqiuflk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://a7sdsdasdasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eirwulk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://wrqiulhh4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiurlkf5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://d2sdasdasdasdad[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://car-rn9[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewtiulk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eooiuunb2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://windows-security-alert-002145gg[.]pages[.]dev/
- hxxps://host-aoq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tritronaridipruvi[.]distrates[.]my[.]id/win/index[.]php?vq=Wc6HoCrROTb3d0Dnkus0xGI4RDRlMmJDWmswQWduR0tpSjNZSkJYOEZaMVpYV05VeVQxS2ZZdCswWUpEN2pZc0xKUHNiSFJhRjFwRVdvNkNWQkEvcDRNendzaHlwbjg1SlMzR1FSTlZ5ZEhzMWxwL2x2TjVuNXpSQWk2Q1RmM0FLbHRGLzB6RG54b1hLdU9sbEVEalRacmlDNWRMVnlWcGxjem80UWE2b3oxdU5jVXJVc0pBaFFuaytRVk53NWFwajZPdkQ2S0dwMzhwb1NqWg==
- hxxps://bidtrrvolling[.]pages[.]dev/
- hxxps://eooiuunb9-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rulayazuua[.]z14[.]web[.]core[.]windows[.]net/
- hxxps://beyma-hosteleria[.]es/?p=6b87588f7dd6fb7fb00965d673ea0cc6&u=ea5b6ae9297b5e1511494103184d5705135c5c4d421053120756474d5e1343044b5a5d54185d5c12585146545b4f5013485d024c5c14445454090b4854550558540c5a4a07
- hxxps://straem[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://erilkeiru1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trackm425[.]sg-host[.]com/en/new[.]html
- hxxps://tronbhjm8u7[.]z13[.]web[.]core[.]windows[.]net/?_event=eab3f0a5d938e7d0b525648f940d2779&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ewiulrfk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://pabilerss[.]xyz/
- hxxps://f8uigfyfuyfyfiyguo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://erwiuloi[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ietlwkiue1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s11adsadasddadassda[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ietlwkiue8-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eooiuunb2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://reqiuflk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://ewiuk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://rqeiulkf-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://gghdjh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://music-ayn[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://w8hjgghjhgjghjjghghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriulgr2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://s1fvbrwfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://rqeiulkf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://eriulgr3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a9jkhkhjkhjkjhkjhkhjkh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t6cydytdtufyufyiu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://zcb2wkjan7y6t[.]z13[.]web[.]core[.]windows[.]net/?_event=ed6e8a0d2ac41cd0946bef91a55b9e84&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ewiugkrl5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://engine-5ja[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://etiulrk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fhuuu1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriulgr2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wrqukfj[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
- hxxps://wrqukfj[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-20147-13437
- hxxps://inntess[.]pages[.]dev/
- hxxps://7f33120b4h794351b860[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://eooiuunb6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewtiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulrk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s15sadsadasdassdasd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://t9wfiewhufgewew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s7ertghregwegwe[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://etiulrk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://w10gcyxrtrcytcytctytu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://symmetry-8by[.]pages[.]dev/
- hxxps://rqeiulkf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jugglingup[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://tronjkams85rd6[.]z13[.]web[.]core[.]windows[.]net/?_event=60f3aab370e8d3065b0eec3a3e4406e1&click_id=2isqs5gqpmb6lkghr&tid=835&subid=googre[.]com&ref=googre[.]com&969
- hxxps://iufslkhd6-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://rqeiulkf6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://m6fuyddtydfuyfyi[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://fhuuu1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://th2uyfudfudfuydfuyfyfyii[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://secure-squid-app-lpteb[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://eriulgr4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://5339f7aeb4994dc98189[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tweiugkl3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://s9utdtduydyfiyiyg[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiugkrl1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://money-3tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://a4sdasddadassdsa[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://esdiugfkj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esdiugfkj3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eisuflk3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://porusecure-x40c-app-epb8b2f6bwfsadfv[.]canadacentral-01[.]azurewebsites[.]net/Wi044nh1delpRjK0044/index[.]html
- hxxps://ewtiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eirwulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://th6gtvfvfvfvgy[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eirwuf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://t3uffcttydfytfutfugv[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eooiuunb4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://a8hjghjghjghjghjghj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://iufslkhd1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://elude-933[.]pages[.]dev/
- hxxps://tronjkm94eaxs[.]z13[.]web[.]core[.]windows[.]net/?_event=a03cec254d00f397675edd6b5cace40d&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://a4asdasdasdada[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://x3asdasdasdadassd[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tronbfc73wakj[.]z13[.]web[.]core[.]windows[.]net/?_event=f7bbba1cce02894634971234f177a3af&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://01c08hju4195h3f39f250[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://windows-security-5ti[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://wrqiulhh5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://t11wefewfewfew[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://nisrtodot[.]pages[.]dev/
- hxxps://ewtiulk4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trackm433[.]sg-host[.]com/en/new[.]html?
- hxxps://rqeiulkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://pgulyc3dhm9vnik2q675b0s4[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://eoiyru1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eisuflk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://1k56ab911a2542c6bda0[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://construe[.]pages[.]dev/
- hxxps://tablet-4rd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://xhyurmarburgyushwarnashman[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://eirwuf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://t5ufdytdytdytdutfu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://iufslkhd1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://o07aya5k4i2[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-508-6269
- hxxps://eoiyru1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://zcb2w6ed7cxh7y[.]z13[.]web[.]core[.]windows[.]net/?_event=444b9c9936bab31e94a9439386f39407&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://project-23u[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eooiuunb6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://network-37d[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://m13jhftdtdtduu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiuk0-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://screen-exw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ae96wnv69ow[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-308-9481
- hxxps://wrqiulhh1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a6gghgfgfhgfhfhfh[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://w7gjhgjgjgjjgjgjgj[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://f10utyd6td65ff86[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ietlwkiue[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iufslkhd2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://x7adasdasdasdasdsadas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://tronmjaks5rd7y[.]z13[.]web[.]core[.]windows[.]net/?_event=5921b6c4afbd46463aa3aeaef638e100&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://dssddddsssffffrrrrggghh[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://ewtiulk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://m3fdytdtudyifiugo[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://snow-43j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://trackm426[.]sg-host[.]com/en/new[.]html?
- hxxps://ewiurlkf1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://2ce9608121b84897bb00[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d10dbmvk5mqs73fha82g&sou=6b27c2829a672d05ac523ce4c&cost=top%20games&ip=itchi[.]io&7=76[.]209[.]193[.]172&8=&9=
- hxxps://ietlwkiue7-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wrqiulhh3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://cold-418[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://th7rddrtyyyubyu[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://s3sadasdasdasdasas[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://wqnfue[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(050)-5050-1955
- hxxps://zcb2wjknam7s5r[.]z13[.]web[.]core[.]windows[.]net/?_event=768bba3817be5c49a1912a1f45f9f0d3&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://v25n1jwjbq3[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-522-5087
- hxxps://tronbkamsfc64e[.]z13[.]web[.]core[.]windows[.]net/?_event=431a4aec278aedb2e4025d4763961a3c&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://reqiuflk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://coachings[.]z13[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887x/index[.]html
- hxxps://hammm7-secondary[.]z28[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-1960
- hxxps://tweiugkl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ietlwkiue-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7404
- hxxps://y1ghhggfhfggfgfhfhf[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiugkrl3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.