61 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 61 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://awuykjd3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriuklj1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiulrk2[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://chatflyjapan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://cricket-arz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eroilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fygyidiftfyu[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://reuwyjh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://balance-5ez[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://hgfghhh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://eriuklj-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiurlkje-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh19-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jdjjddd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://etoirlku5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://uuuuiiiiuiii2[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://awuykjd1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eiuseriu4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lecuritl057[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://rwkjiuyk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjka8s3w42[.]z13[.]web[.]core[.]windows[.]net/?_event=d0c2a7a75957258390b777d4909bd355&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://exploreadventureworld[.]site/
- hxxps://eroilk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://1023sosk2523o1nw355kbuo4[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d191dmif7lqc73bcfm10&sou=6bf86e902d20e2396e427bad5&cost=webgemsnyc[.]com&ip=webgemsnyc[.]com&7=76[.]220[.]50[.]22&8=&9=
- hxxps://boblenuglablasacharo[.]bothese[.]my[.]id/win/index[.]php?vq=2V57H03nqlqAVHcDaiSpYVFncVUrcmRna0ZIMW1VeXVPTkJnVVJCczhwdVlOYjUxbVhyYWplQm9xL0JGaFBXWlY0OSswUVlXZy9tcnVoaWR4V0s0WWtDUkVGWkxqTmd4MlptaFVyeEp5YktaSHJ0R1pqaTl0QlFIR3F2MVpWZHQzZjJVOXdzaGtrWXA4UDNFSkM4TCtqd1g3bEJNVFlVekVKK2tmZTlmNDg3WTZucVlUalBNNmdBSUJQazhaVDNhUXdoWlowWDBGRFY0TVVwMw==
- hxxps://fghdffd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://ewiuw1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://osakaojap[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://heeeting11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://javhdfinaljapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://moshoprurur[.]brassifices[.]my[.]id/win/index[.]php?vq=VIGoJAegwJ7SdaY674VvxUsrMkZCN3BDQzR0NnY1RG5oUWxxcnhpeDl1Vng3ZFlXNFRoUlNlSDlaZnVVYXBieEN4Nzl2QlU3a2hmY21TTEpIeDh1ZnhZSVZNOVF1Z1FYZ2RsdEg0ZnMzeHFIRTVjbzV3UDVxcFBacFpRZ3d3d05hZEpLakNHOFFFR1oxcmRVUFp0SVBnMW0rc2VUckNLdjJrUVhpNXRiSjZRWE1wRytKYjh3WUdIWDVyaEZSRVJQUmRFSUtud0hsa2lldnBUQw==
- hxxps://gtgfddfgx73[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://gewiurk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh18[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriuklj2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eroterestjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reiqluk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eroilk4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dgfdgdfcd81[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
- hxxps://gewiurk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tokyoteeniess[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://secur-orca-app-e98m3[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://gewiurk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3028lprfldyqtieqkbzqnekm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://epornerjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://pornkaijap[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tekingh31-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fdskju5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eiuseriu1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eroilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fdskju4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://stream-f2m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://monkfish-app-2-zoqkn[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://tekingh32[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sdfbsdhjd-lobster-app-vusu8[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://mustjavjap[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://ichigocandyy[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tekingh21[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://radio-a4f[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rsatnatyocajr[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
- hxxps://rankle-5eb[.]pages[.]dev/
- hxxps://decodepopddeeddfffgggg[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://170625aaauuussstraliaa31[.]z24[.]web[.]core[.]windows[.]net/?tblci=GiCzik4SpiVMTZ6CzshMb04ZnoeBHBoUlpJ-tVHwcqEkJCC1-m8o9a3yxKHbxd5LML-faw
- hxxps://eiuseriu5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh27-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://7b73e6844fc2416083a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tronbhjna8s4e6[.]z13[.]web[.]core[.]windows[.]net/?_event=9d06a04e183e70dcc274dee7a5afe445&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://eroilk4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rqwu09[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://micros-sehell-app-3ujyf[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://etiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ssyelxyja[.]b-cdn[.]net/12/index[.]html?phone=%201-888-848-3219
- hxxps://video-6ay[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rfiuqk3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://973eb939ad8d4d18839[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://5012skajjxdlqguabwzmnxhl[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://mango-9cr[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://enrapture[.]pages[.]dev/
- hxxps://efilskj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hellopornojapanes1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://ephemeral-dodol-79c571[.]netlify[.]app/
- hxxps://jfjkskjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://rfiuqk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us22a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://rwiulrk2-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://liuuil1-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://eroilk2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wehuewewhf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://754hd043f3014980bb7[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://javmovesjapaness[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reiqulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us03c[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://rqwu09-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh28-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rfiuqk-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiukl1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://orca-app-scijk[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://drrrddrrrdddsssddfffdddd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://etiulk1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://errorzxm10032xx[.]z13[.]web[.]core[.]windows[.]net/Ma010ch1delpSh010/index[.]html?Aniph=1-833-770-3750
- hxxps://etiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewiurk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://1017wik32z072de2r0kt1c5a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://2017thoxaqqpragmmxhzzyhh[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fwdfwddwwwddhhkjj[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://twielurk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk1-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiuw[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lkwerue[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://hggdhhj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://heeeting1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etoirlku[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://protonoftexc[.]pages[.]dev/
- hxxps://2022vwxubpffnqwaznyaspwq[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tekingh31[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fgfgdddssswwwdddxxddd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://gewriulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://awuykjd1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us13a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://d83bf20b52x54fa286389[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0618us04x[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://1017tncvrriarszbxbedikwa[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0620us07a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://hgfhhjhh[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://qeriuk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://virtuoso-f3q[.]pages[.]dev/
- hxxps://3031drbxxldcgethznggbqvm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://heeeting2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etoirlku-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewiurk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://radio-3pu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://gtgfddfgx71[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://qeriuk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewiurk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://zenrapornjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tekingh20[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b804cdef6e244880b41[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://eriuklj3[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://camvideoshub1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://rwkjiuyk-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aviininjapan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reuwyjh5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://smartphone-4dm[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://lecuritl093[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://qeriuk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://database-9vd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://incongruity[.]pages[.]dev/
- hxxps://dudirireprutiprik[.]aparticult[.]my[.]id/win/index[.]php?vq=L7FWMaQRF6kmehr5mILp2DBzamFlQ01adXg4Z1VRM3RwSG9TMFdpMnpIRTdvMFFpOUdwbXFsay9FNnZYSk1ROEJ2RkttRnFRaUhzdk14T1Z1M1BJb3dCT3VwQ2hPcEp4QTdPY21WOG9vd3RpWVlKbHRjbnN0NkpzLzUxR3YzZEFvVDlpRDFudFlxMm9LcGZJSXl6c1dNMnVVcXRvWXMxdndZOTJPYTA3cEF0RkhBb1Z3T2ZvdlNjYmtDa0lhbDV0YlI4Nm1hb0lTbW5TdFczWQ==
- hxxps://ewiurlfkj1[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://yesvidesjapan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://rwkjiuyk5[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fwdffssdddgghhhgggffhhh[.]z19[.]web[.]core[.]windows[.]net/
- hxxps://reiukl4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk1[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://idols6969japan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://fwwxxffwxxddsssfffddssdd[.]z19[.]web[.]core[.]windows[.]net/
- hxxps://eroilk2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://homovsjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eriuklj3-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting8[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxp://bangerbillcrm-env[.]eba-b9mpgged[.]us-east-1[.]elasticbeanstalk[.]com/?gad_source=5&gad_campaignid=22682673242&gclid=EAIaIQobChMI27yKkJT2jQMV2pXuAR0_6jV4EAEYASAAEgJrAvD_BwE
- hxxps://iurelk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://football-ao6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://fidooreswerdes[.]z1[.]web[.]core[.]windows[.]net/dv[.]html
- hxxps://jdsjjhdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://awuykjd4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jksdjjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://jainpokliultachor[.]pages[.]dev/[.]env
- hxxps://reuwyjh2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ddgnhfgddg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://sajfhsuf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://dgmkbr0487[.]azurewebsites[.]net/Wi0nHelpJwrr030/index[.]html
- hxxps://ewikjf4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us03x[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://twielurk3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://saww5[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
- hxxps://tronjkma9s5r7[.]z13[.]web[.]core[.]windows[.]net/?_event=2589ca430f13b1491bc5f90a38dfac69&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://a3c9as8hx98as8[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://nimumiru[.]aparticult[.]my[.]id/win/index[.]php?vq=AP0uftG0/AZHyUoZIvIRKERHQTV0YWVwYTZ5NTFlRjdweGtNU0tqSitveW9ndDBPVHA4WHJOcXM2RUFyem1pQzQ0Q3RjTmJUSXBkSXZUQTMyQ1BOU3pvNjRkYzh2RWh3YWxOeGtETkdyZS9id0dtK1NacU1DcG1CWHg5K3R4eGp4Zjl5ZENXZnFVQkllR1RML3lROXhUR2pNM1FYQW93QkxOVEV6bEo2VmREb0E1ajBTZFRjdXVZYnZSZWh5S2xzbnpXcXVPSnR5S2tKNkh4dg==
- hxxps://tronmjka8s4ed64[.]z13[.]web[.]core[.]windows[.]net/?_event=a36850adcaac930334bdd506143ad8d2&tid=4&subid=twitfer[.]com&ref=twitfer[.]com&3=
- hxxps://fdskju1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us11x[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://gewriulk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://245f2a99fe6d4c089cd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://poeepepoie[.]z9[.]web[.]core[.]windows[.]net/?phone=KzEgKDg2NikgNzcxLTEzNDY=
- hxxps://eiuseriu5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://d417d169c7fe4df1a32[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://qeriuk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dslkfhdsjkfh-sdhfkjsdk-app-v8mfs[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://iuly15[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
- hxxps://tekingh21-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dfffddssssfffddddgghhhh[.]z28[.]web[.]core[.]windows[.]net/
- hxxps://tronmjkx6ta8s5[.]z13[.]web[.]core[.]windows[.]net/?_event=d844f1bd7b05617891aae9b3de6b5e31&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://heeeting10[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewgfrug[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://jhghgfh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://eriuklj5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://javsubtitlesjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eiuseriu3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eritojapanesporn[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://kkfkkd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://viruswarning0620us27a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://rwkjiuyk5-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjka9s4e5r[.]z13[.]web[.]core[.]windows[.]net/?_event=46cbf937aa9bd5b12ce148e56e4f4739&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ruwkj[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://89a8d51699f1407ea5b2[.]z19[.]web[.]core[.]windows[.]net/
- hxxps://a6d678ig8vj5dh5[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://youyouravjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tronbdc7ya83[.]z13[.]web[.]core[.]windows[.]net/?_event=198b36449461ac717699e5fc4e5d0092&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxp://dwpoffwe2k9a10[.]club/
- hxxps://reiukl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us16a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fdgwfgdwhhbbbnmmmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://hentaigasmm[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://heeeting5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kdsdkkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://etoirlku5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh16[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://snow-97y[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rwkjiuyk4[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reuwyjh5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fdskju4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewiurk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etoirlku3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us02c[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://rwkjiuyk3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://japanesmomm[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tekingh32-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://threadbare[.]pages[.]dev/
- hxxps://fdskju-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dgfdgdfcd81-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
- hxxps://javpicsjap[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://decodedidopotpoop[.]z13[.]web[.]core[.]windows[.]net/?tk=wML0z4aZiryb1gfuBE8onJh9mUFVseRQ
- hxxps://drtuberjapanesn[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://money-8wa[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://zcb2wjkma9s5r7d6[.]z13[.]web[.]core[.]windows[.]net/?_event=482b16bc3fb06cd0212fb46e23fbdc97&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://ksdjjdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://rfiuqk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fdskju3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gopornojapanes1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eroilk3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://detectvirrrruuusssssscan[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tronmjk84cazs2[.]z13[.]web[.]core[.]windows[.]net/?_event=ebd6933b1c6ee4b03041bb8f6ce3a623&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://fdskju2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk2-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://window-8wt[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://reiukl3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us07z[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://hentaihereee[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eriuklj4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a7fd6g8a89hxas98[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://ewiuw1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewikjf3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk009[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh27[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a4fgc7a9shxsh90[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://weilkjrf2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fdkfkkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://heeeting1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://avglejapanesporno[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://lecuritl052[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://1001g12tktvf5d2vr3841xqi[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://heyymilf[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eiuseriu2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh19[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://saww4[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
- hxxps://a1c98ha0sh9[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://heeeting12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us08c[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://reiqulk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wetulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjka2w7[.]z13[.]web[.]core[.]windows[.]net/?_event=950b01960f7a355ac8f3ef1e551ddabc&tid=12&subid=twitfer[.]com&ref=twitfer[.]com&3=
- hxxps://weilkjrf1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eqwiuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://awuykjd2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://justlesbian[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reiukl5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fgfdgfxcui45-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
- hxxps://hentaifuckker[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://watchjav[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://python-5z8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://eroilk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronblmx4ea7s6t[.]z13[.]web[.]core[.]windows[.]net/?_event=6a4dc86b7f9ab1e0b0062c395dfc532f&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://eqwiuk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://saww7[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
- hxxps://reiukl1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://liuuil4-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://reiqulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting3[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://liuuil2[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://nipponniche[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://alohatubee[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://jksajdsj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://tekingh18-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wqkfjewif[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://fwfwwsddsddddrrddddmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://3024fukwmgvbimxomupwwjsh[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://gewriulk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://coral-app-jxzze[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://fgfdgfxcui45[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1825
- hxxps://monkfish-app-jprkf[.]ondigitalocean[.]app/
- hxxps://virtualrealjapan1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://lionfish-app-x38xs[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://reiqluk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dgghtfgg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://decadinfdssecureintehel[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://reuwyjh2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etuetu1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://eroilk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://awuykjd2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etoirlku4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh30-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tharajun[.]blob[.]core[.]windows[.]net/$web/index[.]html
- hxxps://rfiuqk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbsz42qj7y[.]z13[.]web[.]core[.]windows[.]net/?_event=bc712a86c1a0cc3d123c282e8ef09258&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://tronblkmajs83w[.]z13[.]web[.]core[.]windows[.]net/?_event=4ba89529c344a59e1c6830153899e5bf&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://tomadochippojapan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://uuuuiiiiuiii2-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://ruwkj-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjk94rczas2[.]z13[.]web[.]core[.]windows[.]net/?_event=224d2066166044e69ce3e92f3de1c839&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://jav168japan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://eriuklj[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriuklj1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vdsuvdh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://10567196l14545024d442[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://japanhdvjapan1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tekingh33-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eroilk5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jgfdghgf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://ksdjjdjdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://a2c9h8sahx98ash89[.]z19[.]web[.]core[.]windows[.]net/?pnoorg=1
- hxxps://eriuklj4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dksldldk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://heeeting12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kjfioej[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://weilkjrf2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://mngfhjkh[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://weiuurw-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weilkjrf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewirukf6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-7574
- hxxps://twielurk2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk009-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiulrk[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://skdkdkkd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://uuuuiiiiuiii1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://tekingh26-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fhhdfbhj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://etoirlku2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nonotuti[.]aparticult[.]my[.]id/win/index[.]php?vq=+7BqYVcxnih38UScIC5RoFZxejk0NmhRaVlMUHNKMkJSSU9CRHdDYUR2VG1CVG13cXRLemgyZ09QYnJjMHpKVmdYQms3eWpRUXBTNW5yYlVkOXdzRzRkWmJuTjQwWkZVbk5xS2tpSDBTZDVFWEJGMU03OVY2QTU3VmkzeG5tVng2VDFLRnYzSzd1UGZCalcyYmtCbkFMZ1VpZ05ZelhtaDBlNTRna2xJRXpGK3BDRkxOVDRna3ZFdVFhRUtyZWFOdWNJRkRpU3c2Si9nWlkyaw==
- hxxps://fwwffdddfffddfffggggfff[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://etiulk5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfoewwf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://iurelk00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqulk3[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eroilk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etoirlku1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reuwyjh4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://augury[.]pages[.]dev/
- hxxps://template-cbd[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://images-c0i[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://fdskju5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://saww7-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
- hxxps://etiulk2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us15a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tekingh28[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ksjfkkfjd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://etoirlku2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sjdhkfjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://qeriuk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh25-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reuwyjh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0618us11a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://japteensss[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://jsfksjdjd[.]z13[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=03-6110-0421
- hxxps://jsfksjdjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=03-6110-0421
- hxxps://awuykjd3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting3-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eriuklj5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqulk3-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://upervkakeokda-secondary[.]z13[.]web[.]core[.]windows[.]net/f2997/index[.]html
- hxxps://ewirukf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-7574
- hxxps://saww4-secondary[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86677-11593
- hxxps://ewikjf5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etiulk4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rfiuqk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://javhihihihijapan[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://reuwyjh3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://flowchart-667[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://reuwyjh4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://javtsunamijapan1[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://tronbljm5rs7[.]z13[.]web[.]core[.]windows[.]net/?_event=ebe360898e1b5d091424b367ae5934be&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://qeriuk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://a1b42777g1k9l07ab7475[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://heeeting5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://poplokopola-5ctoh[.]ondigitalocean[.]app/w173d5a-9/index[.]html
- hxxps://fdskju1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://awuykjd4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiulrk-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101-805-637-2122
- hxxps://reiukl3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gtgfddfgx73-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://dederdddfffsssdddfffpop[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://eiuseriu4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-855-574-4765
- hxxps://eiuseriu4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hgghjhg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://etoirlku1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiqluk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://onlineshooping[.]xyz/
- hxxps://tronjkans83w[.]z13[.]web[.]core[.]windows[.]net/?_event=58707ee39e874036f20d9ad1105e5fc8&click_id=2isqs1arlmb14vr3z&tid=3&subid=youthbe[.]com&ref=youthbe[.]com&3
- hxxps://qeriuk4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh17[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gtgfddfgx71-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(866)771-1593
- hxxps://delve-3oq[.]pages[.]dev/
- hxxps://stream-a0g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://mueetu30-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sdsdfffffddddffffsssffff[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://qeriuk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://efilskj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rfiuqk[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiukl4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh26[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iurelk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwlmfopewq[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://awuykjd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hentaiherossss[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://fdskju[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeting10-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://6c8d0b54abbb4496a9f2[.]z19[.]web[.]core[.]windows[.]net/?
- hxxps://weiuurw00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weiuurw00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://javhoho[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://kslkdkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://qeriuk5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://handjobjapanes[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://ewiuw-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tekingh30[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://window-692[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://yuajavporno[.]z11[.]web[.]core[.]windows[.]net/
- hxxps://heeeting2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wqbdjwe[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://frmakambuyabiensecurenabiso[.]s3[.]us-east-005[.]backblazeb2[.]com/W0in0Nw0AlxRef1Er077/index[.]html
- hxxps://iurelk5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwkjiuyk2[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3f6a7e1a96de4d38937[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tekingh29-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewiurk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twielurk3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewriulk4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.