2025-06-21 - Tech Support Scam - Phishing Capmapign Observation Alert

61 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 61 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://awuykjd3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriuklj1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwiulrk2[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://chatflyjapan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://cricket-arz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eroilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fygyidiftfyu[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://reuwyjh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://balance-5ez[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://hgfghhh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://eriuklj-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wiurlkje-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh19-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jdjjddd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://etoirlku5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uuuuiiiiuiii2[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://awuykjd1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiuseriu4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://lecuritl057[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://rwkjiuyk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmjka8s3w42[.]z13[.]web[.]core[.]windows[.]net/?_event=d0c2a7a75957258390b777d4909bd355&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://exploreadventureworld[.]site/
  •  hxxps://eroilk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1023sosk2523o1nw355kbuo4[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d191dmif7lqc73bcfm10&sou=6bf86e902d20e2396e427bad5&cost=webgemsnyc[.]com&ip=webgemsnyc[.]com&7=76[.]220[.]50[.]22&8=&9=
  •  hxxps://boblenuglablasacharo[.]bothese[.]my[.]id/win/index[.]php?vq=2V57H03nqlqAVHcDaiSpYVFncVUrcmRna0ZIMW1VeXVPTkJnVVJCczhwdVlOYjUxbVhyYWplQm9xL0JGaFBXWlY0OSswUVlXZy9tcnVoaWR4V0s0WWtDUkVGWkxqTmd4MlptaFVyeEp5YktaSHJ0R1pqaTl0QlFIR3F2MVpWZHQzZjJVOXdzaGtrWXA4UDNFSkM4TCtqd1g3bEJNVFlVekVKK2tmZTlmNDg3WTZucVlUalBNNmdBSUJQazhaVDNhUXdoWlowWDBGRFY0TVVwMw==
  •  hxxps://fghdffd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://ewiuw1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://osakaojap[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://heeeting11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javhdfinaljapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://moshoprurur[.]brassifices[.]my[.]id/win/index[.]php?vq=VIGoJAegwJ7SdaY674VvxUsrMkZCN3BDQzR0NnY1RG5oUWxxcnhpeDl1Vng3ZFlXNFRoUlNlSDlaZnVVYXBieEN4Nzl2QlU3a2hmY21TTEpIeDh1ZnhZSVZNOVF1Z1FYZ2RsdEg0ZnMzeHFIRTVjbzV3UDVxcFBacFpRZ3d3d05hZEpLakNHOFFFR1oxcmRVUFp0SVBnMW0rc2VUckNLdjJrUVhpNXRiSjZRWE1wRytKYjh3WUdIWDVyaEZSRVJQUmRFSUtud0hsa2lldnBUQw==
  •  hxxps://gtgfddfgx73[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://gewiurk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh18[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriuklj2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroterestjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reiqluk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroilk4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dgfdgdfcd81[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
  •  hxxps://gewiurk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tokyoteeniess[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://secur-orca-app-e98m3[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://gewiurk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://3028lprfldyqtieqkbzqnekm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://epornerjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://pornkaijap[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh31-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdskju5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiuseriu1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdskju4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://stream-f2m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://monkfish-app-2-zoqkn[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://tekingh32[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdfbsdhjd-lobster-app-vusu8[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://mustjavjap[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://ichigocandyy[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh21[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://radio-a4f[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rsatnatyocajr[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://rankle-5eb[.]pages[.]dev/
  •  hxxps://decodepopddeeddfffgggg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://170625aaauuussstraliaa31[.]z24[.]web[.]core[.]windows[.]net/?tblci=GiCzik4SpiVMTZ6CzshMb04ZnoeBHBoUlpJ-tVHwcqEkJCC1-m8o9a3yxKHbxd5LML-faw
  •  hxxps://eiuseriu5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh27-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://7b73e6844fc2416083a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronbhjna8s4e6[.]z13[.]web[.]core[.]windows[.]net/?_event=9d06a04e183e70dcc274dee7a5afe445&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://eroilk4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rqwu09[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://micros-sehell-app-3ujyf[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://etiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ssyelxyja[.]b-cdn[.]net/12/index[.]html?phone=%201-888-848-3219
  •  hxxps://video-6ay[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rfiuqk3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://973eb939ad8d4d18839[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://5012skajjxdlqguabwzmnxhl[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mango-9cr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://enrapture[.]pages[.]dev/
  •  hxxps://efilskj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hellopornojapanes1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://ephemeral-dodol-79c571[.]netlify[.]app/
  •  hxxps://jfjkskjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://rfiuqk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us22a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rwiulrk2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://liuuil1-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://eroilk2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wehuewewhf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://754hd043f3014980bb7[.]z13[.]web[.]core[.]windows[.]net/?
  •  hxxps://javmovesjapaness[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reiqulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us03c[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rqwu09-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh28-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rfiuqk-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiukl1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://orca-app-scijk[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://drrrddrrrdddsssddfffdddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://etiulk1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://errorzxm10032xx[.]z13[.]web[.]core[.]windows[.]net/Ma010ch1delpSh010/index[.]html?Aniph=1-833-770-3750
  •  hxxps://etiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewiurk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1017wik32z072de2r0kt1c5a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://2017thoxaqqpragmmxhzzyhh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fwdfwddwwwddhhkjj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://twielurk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk1-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiuw[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://lkwerue[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://hggdhhj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://heeeting1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etoirlku[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://protonoftexc[.]pages[.]dev/
  •  hxxps://2022vwxubpffnqwaznyaspwq[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh31[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fgfgdddssswwwdddxxddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gewriulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://awuykjd1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us13a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://d83bf20b52x54fa286389[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0618us04x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://1017tncvrriarszbxbedikwa[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0620us07a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hgfhhjhh[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://qeriuk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://virtuoso-f3q[.]pages[.]dev/
  •  hxxps://3031drbxxldcgethznggbqvm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://heeeting2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etoirlku-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewiurk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://radio-3pu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gtgfddfgx71[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://qeriuk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewiurk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://zenrapornjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh20[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://b804cdef6e244880b41[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriuklj3[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://camvideoshub1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://rwkjiuyk-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://aviininjapan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reuwyjh5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://smartphone-4dm[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://lecuritl093[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://qeriuk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://database-9vd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://incongruity[.]pages[.]dev/
  •  hxxps://dudirireprutiprik[.]aparticult[.]my[.]id/win/index[.]php?vq=L7FWMaQRF6kmehr5mILp2DBzamFlQ01adXg4Z1VRM3RwSG9TMFdpMnpIRTdvMFFpOUdwbXFsay9FNnZYSk1ROEJ2RkttRnFRaUhzdk14T1Z1M1BJb3dCT3VwQ2hPcEp4QTdPY21WOG9vd3RpWVlKbHRjbnN0NkpzLzUxR3YzZEFvVDlpRDFudFlxMm9LcGZJSXl6c1dNMnVVcXRvWXMxdndZOTJPYTA3cEF0RkhBb1Z3T2ZvdlNjYmtDa0lhbDV0YlI4Nm1hb0lTbW5TdFczWQ==
  •  hxxps://ewiurlfkj1[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://yesvidesjapan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://rwkjiuyk5[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fwdffssdddgghhhgggffhhh[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://reiukl4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk1[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://idols6969japan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://fwwxxffwxxddsssfffddssdd[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://eroilk2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://homovsjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eriuklj3-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting8[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxp://bangerbillcrm-env[.]eba-b9mpgged[.]us-east-1[.]elasticbeanstalk[.]com/?gad_source=5&gad_campaignid=22682673242&gclid=EAIaIQobChMI27yKkJT2jQMV2pXuAR0_6jV4EAEYASAAEgJrAvD_BwE
  •  hxxps://iurelk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://football-ao6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fidooreswerdes[.]z1[.]web[.]core[.]windows[.]net/dv[.]html
  •  hxxps://jdsjjhdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://awuykjd4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jksdjjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://jainpokliultachor[.]pages[.]dev/[.]env
  •  hxxps://reuwyjh2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddgnhfgddg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://sajfhsuf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://dgmkbr0487[.]azurewebsites[.]net/Wi0nHelpJwrr030/index[.]html
  •  hxxps://ewikjf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us03x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://twielurk3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://saww5[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
  •  hxxps://tronjkma9s5r7[.]z13[.]web[.]core[.]windows[.]net/?_event=2589ca430f13b1491bc5f90a38dfac69&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://a3c9as8hx98as8[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://nimumiru[.]aparticult[.]my[.]id/win/index[.]php?vq=AP0uftG0/AZHyUoZIvIRKERHQTV0YWVwYTZ5NTFlRjdweGtNU0tqSitveW9ndDBPVHA4WHJOcXM2RUFyem1pQzQ0Q3RjTmJUSXBkSXZUQTMyQ1BOU3pvNjRkYzh2RWh3YWxOeGtETkdyZS9id0dtK1NacU1DcG1CWHg5K3R4eGp4Zjl5ZENXZnFVQkllR1RML3lROXhUR2pNM1FYQW93QkxOVEV6bEo2VmREb0E1ajBTZFRjdXVZYnZSZWh5S2xzbnpXcXVPSnR5S2tKNkh4dg==
  •  hxxps://tronmjka8s4ed64[.]z13[.]web[.]core[.]windows[.]net/?_event=a36850adcaac930334bdd506143ad8d2&tid=4&subid=twitfer[.]com&ref=twitfer[.]com&3=
  •  hxxps://fdskju1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us11x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gewriulk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://245f2a99fe6d4c089cd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://poeepepoie[.]z9[.]web[.]core[.]windows[.]net/?phone=KzEgKDg2NikgNzcxLTEzNDY=
  •  hxxps://eiuseriu5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://d417d169c7fe4df1a32[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qeriuk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dslkfhdsjkfh-sdhfkjsdk-app-v8mfs[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://iuly15[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://tekingh21-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfffddssssfffddddgghhhh[.]z28[.]web[.]core[.]windows[.]net/
  •  hxxps://tronmjkx6ta8s5[.]z13[.]web[.]core[.]windows[.]net/?_event=d844f1bd7b05617891aae9b3de6b5e31&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://heeeting10[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewgfrug[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://jhghgfh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://eriuklj5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javsubtitlesjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eiuseriu3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eritojapanesporn[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://kkfkkd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://viruswarning0620us27a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rwkjiuyk5-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmjka9s4e5r[.]z13[.]web[.]core[.]windows[.]net/?_event=46cbf937aa9bd5b12ce148e56e4f4739&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ruwkj[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://89a8d51699f1407ea5b2[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://a6d678ig8vj5dh5[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://youyouravjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tronbdc7ya83[.]z13[.]web[.]core[.]windows[.]net/?_event=198b36449461ac717699e5fc4e5d0092&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxp://dwpoffwe2k9a10[.]club/
  •  hxxps://reiukl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us16a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fdgwfgdwhhbbbnmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hentaigasmm[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://heeeting5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kdsdkkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://etoirlku5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh16[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://snow-97y[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rwkjiuyk4[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reuwyjh5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdskju4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewiurk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etoirlku3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us02c[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rwkjiuyk3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://japanesmomm[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh32-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://threadbare[.]pages[.]dev/
  •  hxxps://fdskju-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dgfdgdfcd81-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
  •  hxxps://javpicsjap[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://decodedidopotpoop[.]z13[.]web[.]core[.]windows[.]net/?tk=wML0z4aZiryb1gfuBE8onJh9mUFVseRQ
  •  hxxps://drtuberjapanesn[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://money-8wa[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zcb2wjkma9s5r7d6[.]z13[.]web[.]core[.]windows[.]net/?_event=482b16bc3fb06cd0212fb46e23fbdc97&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://ksdjjdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://rfiuqk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdskju3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gopornojapanes1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eroilk3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://detectvirrrruuusssssscan[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronmjk84cazs2[.]z13[.]web[.]core[.]windows[.]net/?_event=ebd6933b1c6ee4b03041bb8f6ce3a623&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://fdskju2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk2-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://window-8wt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reiukl3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us07z[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hentaihereee[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eriuklj4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a7fd6g8a89hxas98[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://ewiuw1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewikjf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk009[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh27[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a4fgc7a9shxsh90[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://weilkjrf2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdkfkkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://heeeting1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://avglejapanesporno[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://lecuritl052[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://1001g12tktvf5d2vr3841xqi[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://heyymilf[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eiuseriu2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh19[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://saww4[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
  •  hxxps://a1c98ha0sh9[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://heeeting12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us08c[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reiqulk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmjka2w7[.]z13[.]web[.]core[.]windows[.]net/?_event=950b01960f7a355ac8f3ef1e551ddabc&tid=12&subid=twitfer[.]com&ref=twitfer[.]com&3=
  •  hxxps://weilkjrf1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eqwiuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://awuykjd2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://justlesbian[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reiukl5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fgfdgfxcui45-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
  •  hxxps://hentaifuckker[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://watchjav[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://python-5z8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eroilk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronblmx4ea7s6t[.]z13[.]web[.]core[.]windows[.]net/?_event=6a4dc86b7f9ab1e0b0062c395dfc532f&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://eqwiuk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://saww7[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
  •  hxxps://reiukl1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://liuuil4-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://reiqulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting3[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://liuuil2[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://nipponniche[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://alohatubee[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://jksajdsj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://tekingh18-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wqkfjewif[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://fwfwwsddsddddrrddddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://3024fukwmgvbimxomupwwjsh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gewriulk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://coral-app-jxzze[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://fgfdgfxcui45[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
  •  hxxps://monkfish-app-jprkf[.]ondigitalocean[.]app/
  •  hxxps://virtualrealjapan1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://lionfish-app-x38xs[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://reiqluk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dgghtfgg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://decadinfdssecureintehel[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://reuwyjh2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etuetu1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://eroilk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://awuykjd2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etoirlku4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh30-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tharajun[.]blob[.]core[.]windows[.]net/$web/index[.]html
  •  hxxps://rfiuqk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbsz42qj7y[.]z13[.]web[.]core[.]windows[.]net/?_event=bc712a86c1a0cc3d123c282e8ef09258&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://tronblkmajs83w[.]z13[.]web[.]core[.]windows[.]net/?_event=4ba89529c344a59e1c6830153899e5bf&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://tomadochippojapan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://uuuuiiiiuiii2-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://ruwkj-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmjk94rczas2[.]z13[.]web[.]core[.]windows[.]net/?_event=224d2066166044e69ce3e92f3de1c839&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://jav168japan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://eriuklj[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qeriuk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriuklj1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vdsuvdh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://10567196l14545024d442[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://japanhdvjapan1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh33-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroilk5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jgfdghgf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://ksdjjdjdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://a2c9h8sahx98ash89[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
  •  hxxps://eriuklj4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dksldldk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://heeeting12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjfioej[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://weilkjrf2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mngfhjkh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://weiuurw-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weilkjrf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirukf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-7574
  •  hxxps://twielurk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk009-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwiulrk[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://skdkdkkd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://uuuuiiiiuiii1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://tekingh26-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fhhdfbhj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://etoirlku2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nonotuti[.]aparticult[.]my[.]id/win/index[.]php?vq=+7BqYVcxnih38UScIC5RoFZxejk0NmhRaVlMUHNKMkJSSU9CRHdDYUR2VG1CVG13cXRLemgyZ09QYnJjMHpKVmdYQms3eWpRUXBTNW5yYlVkOXdzRzRkWmJuTjQwWkZVbk5xS2tpSDBTZDVFWEJGMU03OVY2QTU3VmkzeG5tVng2VDFLRnYzSzd1UGZCalcyYmtCbkFMZ1VpZ05ZelhtaDBlNTRna2xJRXpGK3BDRkxOVDRna3ZFdVFhRUtyZWFOdWNJRkRpU3c2Si9nWlkyaw==
  •  hxxps://fwwffdddfffddfffggggfff[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://etiulk5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewfoewwf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://iurelk00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqulk3[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroilk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etoirlku1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reuwyjh4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://augury[.]pages[.]dev/
  •  hxxps://template-cbd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://images-c0i[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://fdskju5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://saww7-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
  •  hxxps://etiulk2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us15a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh28[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ksjfkkfjd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://etoirlku2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sjdhkfjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://qeriuk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh25-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reuwyjh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0618us11a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://japteensss[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://jsfksjdjd[.]z13[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=03-6110-0421
  •  hxxps://jsfksjdjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=03-6110-0421
  •  hxxps://awuykjd3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting3-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriuklj5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqulk3-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://upervkakeokda-secondary[.]z13[.]web[.]core[.]windows[.]net/f2997/index[.]html
  •  hxxps://ewirukf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-7574
  •  hxxps://saww4-secondary[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
  •  hxxps://ewikjf5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etiulk4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rfiuqk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javhihihihijapan[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://reuwyjh3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://flowchart-667[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://reuwyjh4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javtsunamijapan1[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://tronbljm5rs7[.]z13[.]web[.]core[.]windows[.]net/?_event=ebe360898e1b5d091424b367ae5934be&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://qeriuk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://a1b42777g1k9l07ab7475[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://heeeting5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://poplokopola-5ctoh[.]ondigitalocean[.]app/w173d5a-9/index[.]html
  •  hxxps://fdskju1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://awuykjd4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwiulrk-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
  •  hxxps://reiukl3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gtgfddfgx73-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://dederdddfffsssdddfffpop[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eiuseriu4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-855-574-4765
  •  hxxps://eiuseriu4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hgghjhg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://etoirlku1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiqluk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://onlineshooping[.]xyz/
  •  hxxps://tronjkans83w[.]z13[.]web[.]core[.]windows[.]net/?_event=58707ee39e874036f20d9ad1105e5fc8&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
  •  hxxps://qeriuk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh17[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gtgfddfgx71-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
  •  hxxps://delve-3oq[.]pages[.]dev/
  •  hxxps://stream-a0g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mueetu30-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdsdfffffddddffffsssffff[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://qeriuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efilskj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rfiuqk[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiukl4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh26[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iurelk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwlmfopewq[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://awuykjd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hentaiherossss[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://fdskju[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://heeeting10-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://6c8d0b54abbb4496a9f2[.]z19[.]web[.]core[.]windows[.]net/?
  •  hxxps://weiuurw00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiuurw00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javhoho[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://kslkdkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://qeriuk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://handjobjapanes[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://ewiuw-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tekingh30[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://window-692[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://yuajavporno[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://heeeting2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wqbdjwe[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
  •  hxxps://frmakambuyabiensecurenabiso[.]s3[.]us-east-005[.]backblazeb2[.]com/W0in0Nw0AlxRef1Er077/index[.]html
  •  hxxps://iurelk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwkjiuyk2[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://3f6a7e1a96de4d38937[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tekingh29-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewiurk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twielurk3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewriulk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.