110 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 110 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://qeriuo3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://komlopewert[.]pages[.]dev/
- hxxps://wjehtiewu[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://tronmjkf53ws6[.]z13[.]web[.]core[.]windows[.]net/?ip=76[.]27[.]137[.]134&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Comcast+Cable&org=Comcast+Cable&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Tennessee&city=Ooltewah&_event=0ad763c994769de9a42f1d3a447dda1c&click_id=1f287rhqmcdfjm8z&tid=12&subid=twitfer[.]com&ref=twitfer[.]com&3
- hxxps://www[.]verify[.]checknow[.]forum/
- hxxps://lionfish-app-4l9is[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://urchin-app-y729o[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://tuiwlke[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiulk65[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://owuplk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0623us06a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://3qroiuwlk9[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wtiuolk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ball-als[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://jwfiewjf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://ewilurkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://uyhftkggg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://tokyogameportalio[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://bauble[.]pages[.]dev/
- hxxps://rwiyqkj8-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beeiiujii1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://template-dp4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://gewtiurlfk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://www[.]mesanterd[.]shop/support[.]html
- hxxps://matrix-aif[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://iutewrlkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hiijjjiikkk2[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://ewutrkl2-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuo2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk7[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://indigo-falcon-356665[.]hostingersite[.]com/win/index[.]html
- hxxps://constructflisdfg[.]pages[.]dev/
- hxxps://rwiyqkj6[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://www[.]ipa[.]go[.]jp/security/anshin/measures/fa-experience[.]html
- hxxps://wtiuolk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kjhtkvgjkjj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://fddccvii2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiulk12-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hgdghjggg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html
- hxxps://wteoilk4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lilijjhui1[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://owuplk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://samm2-secondary[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://fddccvii6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://python-6wg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://routerlopeasd[.]pages[.]dev/
- hxxps://rltkkufh4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj66[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://skddkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://king-prawn-app-7mofo[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://esirufkj4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://akbbb2-secondary[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://beeiiujii1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://rltkkufh5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewtiurlfk5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wtiuolk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kawaiiseductiontc-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://iukjrf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://akbbb5[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-84459-53700
- hxxps://dom-d44[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://erwiuflkjl4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trtjkdkjfdm63[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://trtjkdkjfdm66-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://tronjkma4ed6tf[.]z13[.]web[.]core[.]windows[.]net/?ip=108[.]153[.]17[.]237&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Direcnet+S[.]a[.]c&org=Direcnet+S[.]a[.]c&connectionType=Corporate&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=&city=&_event=32f7552c37953690fb253d5da5262671&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://goldfish-app-vpwde[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(0101)-85555-03185
- hxxps://fddccvii1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lilijjhui5[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://jiikkii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-5164
- hxxps://7224t3k5647f93eb7569315[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://triukjjkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://owuplk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurk1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fkldfdsiet41[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://gfdglfkgfdieer41[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://ewfkjd3-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jkjsdfjdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://erwiuflkjl5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://krkekek[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1800-320-815
- hxxps://aaudsijk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kinkinkyotome-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://iukjrf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronkjmcs75rfe3[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
- hxxps://gewtiurlfk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewutrkl4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://skdkdk[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://tttofns[.]onlinechatforu[.]store/
- hxxps://iukjrf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dghdsfvxsxf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://rwiyqkj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbhk84exzskj[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
- hxxps://troiuroi3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vrtynew832[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-793-4708
- hxxps://mastt2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://ewutrkl1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dlsdllld[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://erwiuflkjl4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd1-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://pseudocode-a2a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://qeriuo3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trtjkdkjfdm61[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://reiukdw00[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dialchufglobe[.]pages[.]dev/
- hxxps://iukjrf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk09[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://downloadpayd[.]com/?p=29f5655e5b89c559f7b140b56722f2c4&u=1c51c4cefa240b401715155b1d1b02501500081547460647010a13155b4516514d06090c1d0b09475e0d120c5e1905464e01570504450d5852555f105103500c530c151755
- hxxps://rewiou3[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuo5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwkjriewf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://hgfhhjhh[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://wteoilk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewtiurlfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://triukjjkf[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://3qroiuwlk7-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://troiuroi2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ninjagamespot[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0626us13a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://aaudsijk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://riuwlkj[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://skdjjdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(0101)-85555-03185
- hxxps://address-1it[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rwiyqkj1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://flsdjjff[.]z13[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(0101)-85555-03185
- hxxps://flsdjjff[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03185
- hxxps://retrench[.]pages[.]dev/
- hxxps://erwiuflkjl3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gfdglfkgfdieer43-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
- hxxps://heyday-dn1[.]pages[.]dev/
- hxxps://heyday-dn1[.]pages[.]dev/ai2[.]mp3
- hxxps://eiurkfjd1-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://triukjjkf-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://owuplk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://complexdropesdfg[.]pages[.]dev/
- hxxps://poyioalan[.]z19[.]web[.]core[.]windows[.]net/
- hxxps://gamerskyoto[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://wqriuelk7[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://exploreramonryp[.]pages[.]dev/
- hxxps://wqttjffb[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://rewiou2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reoilk[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://domecodesccasecurriii[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://owuplk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk8-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rewiou1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://augustfvc3ws287a[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287riamcdjxq4x&tid=6&subid=otka[.]com&ref=otka[.]com&2
- hxxps://owuplk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://etrotypeflow[.]pages[.]dev/
- hxxps://owuplk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wtiuolk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lilijjhui5-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://vvdcciii4[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://3qroiuwlk6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jdsjjhdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://ewilurk2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gfdglfkgfdieer41-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://system-c1l[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://cornflopasdl[.]pages[.]dev/
- hxxps://troiuroi4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kjdfjksjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://domain-dhs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://rltkkufh2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nihonnightstech[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://qwjhruwq[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://esirufkj3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiulk65-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trtjkdkjfdm63-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://tronjkfv3wsa1q76[.]z13[.]web[.]core[.]windows[.]net/?ip=99[.]75[.]131[.]202&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=AT%26T+Internet&org=AT%26T+Internet&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Florida&city=Miami+Gardens&_event=d14d2262b899c035706cfd442cd9ad98&click_id=1f287rismcdix6ga&tid=3&subid=googre[.]com&ref=googre[.]com&3
- hxxps://fddccvii14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiyqkj00-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dfgsfg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://reiulk45-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lilijjhui1-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://viruswarning0623us09a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://beeiiujii4-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://qeriuo-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iutewrlkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewutrkl3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurk4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuo5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewhfeg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://globalditeglu[.]pages[.]dev/
- hxxps://mango-d5t[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://fddccvii15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii14[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://troiuroi2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://prognosticate[.]pages[.]dev/
- hxxps://nammm1[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://kkfkkd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://wteoilk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://9007vjcidozrclcezqojcgda[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://aaudsijk5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wqriuelk1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://viruswarning0624us01z[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0624us39a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://tokyoteaseweb-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://tronjkm83wa1q6[.]z13[.]web[.]core[.]windows[.]net/?_event=8cbc7964a1b1c0b307c8635e924191b6&click_id=1f287rihmc94sv4r&tid=4&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://aaudsijk5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd2[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dkskdmv[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://wteoilk5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://foreeeevvveerrrcoorrrddd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fddccvii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jhfhhk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://trewoi-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj66-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vvdcciii6-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://rwiyqkj3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://owuplk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiyqkj2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkma4ed63w[.]z13[.]web[.]core[.]windows[.]net/?ip=98[.]183[.]216[.]110&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Cox+Communications&org=Cox+Communications&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Virginia&city=Norfolk&_event=53281fd9f3849b62ac606cddbf62be28&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://firstpopforamicis[.]pages[.]dev/
- hxxps://ytoipojl5-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eromangamagicme-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://lskdkkd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://rltkkufh1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjkad5ra8[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
- hxxps://lkheewiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-534-7338
- hxxps://reiulk45[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0623us14d[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://directcodeeeesrcurrri[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ewilurk1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiukd0909[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nastasia[.]z1[.]web[.]core[.]windows[.]net/?tk=Kq724E9Zwv8WPNaAgbfhXm1RHl3DYkTp
- hxxps://wqriuelk7-secondary[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://lecuritz130[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://rltkkufh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kjhfggtkjm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://troiuroi5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiyqkj6-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gfdglfkgfdieer43[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
- hxxps://ewutrkl5-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vvdcciii4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://ewilurk4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk00[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lionfish-app-oonar[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://rwiyqkj8[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmjakd5ra8[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
- hxxps://viruswarning0623us05a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://trustonglobemasteredede[.]pages[.]dev/
- hxxps://domain-4iq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://iutewrlkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0623us01a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://iniquitous[.]pages[.]dev/
- hxxps://fevernnsecccurrriiisccan[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://skdkfkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://walrus-app-2-k3fbu[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://ewilurkj3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://domain-ezg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://gfalstsfatvihir[.]z19[.]web[.]core[.]windows[.]net/winupet/index[.]html
- hxxps://java-6l0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://errorks0x0091sda[.]z13[.]web[.]core[.]windows[.]net/Ma010ch1delpSh010/index[.]html?Aniph=1-877-593-9687
- hxxps://enclave-2q7[.]pages[.]dev/
- hxxps://fddccvii16-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://troiuroi4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewutrkl2[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gcgfchgchjghj-coral-app-k26xb[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://ksjfjjdj[.]z13[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(03)-6110-0421
- hxxps://ksjfjjdj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-6110-0421
- hxxps://ksjfjjdj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://ksjfjjdj[.]z13[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/index[.]html?bcda=(03)-6110-0421
- hxxps://rieulkj5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://pccomputersw1ndow[.]pro/Winhelpline1010/index[.]html
- hxxps://jdfjtksl[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://viruswarning0626us04x[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://wteoilk4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl1[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jkdntjjdkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://3qroiuwlk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eiurkfjd1[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://passionportal-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://akbbb5-secondary[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-84459-53700
- hxxps://village-os1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://viruswarning0623us04d[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://3qroiuwlk09-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rewiou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiukd[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gewtiurlfk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://terr6-secondary[.]z9[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://jhjyyughj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://esirufkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://location-6kg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://samm4-secondary[.]z33[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://wtiuolk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuo1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dkkfkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://elasticfrogkinf[.]pages[.]dev/
- hxxps://rieulkj4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronmkals93w7[.]z13[.]web[.]core[.]windows[.]net/?_event=bcd10bfc0713509825d4ddc30db588ec&click_id=1f287rihmc94sv4r&tid=4&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://fddccvii4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gamearcadejapan[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://reiulk32-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://uvtorikower-secondary[.]z13[.]web[.]core[.]windows[.]net/f2970/index[.]html?clickid=d1er1s55sqmc73cfs6t0
- hxxps://tronbljams94e6[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
- hxxps://troiuroi-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wteoilk00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iutewrlkj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewhfiew[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://iukjrf5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl5[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://samm4[.]z33[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://gewtiurlfk00[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkma9s5rd7[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
- hxxps://viruswarning0625us01f[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://jtsnjvhztnl[.]z13[.]web[.]core[.]windows[.]net/?ph0nq=1-888-974-9170
- hxxps://trtjkdkjfdm64[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://rewiou4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rltkkufh3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiyqkj1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://feverrrrrtrickscannncod[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://reiulk657-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://phone-dk7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://jhkhkjhk-seal-app-cgqgg[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://aaudsijk4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lionfish-app-x38xs[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://3qroiuwlk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://disquisition[.]pages[.]dev/
- hxxps://ewnfiewhf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://learnaboutclassedfg[.]pages[.]dev/
- hxxps://tronjx4ea8s6[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
- hxxps://iukjrf5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ggt65[.]github[.]io/01YD/
- hxxps://iutewrlkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hiijjjiikkk3-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://jpopgamehub[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://ewilurk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://pixelsamurainet[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://trtjkdkjfdm65[.]z4[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(0101)-80595-18715
- hxxps://trtjkdkjfdm65[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://ewfkjd-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbjk9a4ed76[.]z13[.]web[.]core[.]windows[.]net/?_event=8e128f77b9dcb03403235d35c0b7372f&click_id=1f287rihmc94sv4r&tid=4&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://fddccvii3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ksdjjdjdn[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://iutewrlkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://riuwlkj-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0624us16a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ewilurkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk8[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://food-95h[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://passkey-a30[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://3qroiuwlk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii15[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iukjrf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://terr6[.]z9[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(0101)-81826-41446
- hxxps://terr6[.]z9[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://tronmjk831qxzs[.]z13[.]web[.]core[.]windows[.]net/?_event=e4bc7a3f1c8cff439eec8ca6e2c41649&click_id=1f287rihmc94sv4r&tid=4&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://garish[.]pages[.]dev/
- hxxps://gfdglfkgfdieer42[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
- hxxps://ewilurkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfkjd2-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewutrkl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kawaiigamehaven[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://reiulk657[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewfoewwf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://ewutrkl5[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl2[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iutewrlkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://readjustment[.]pages[.]dev/
- hxxps://d7118d65123b5r8db1036[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fkldfdsiet41-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3063
- hxxps://football-e9x[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://sklkkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://wtiuolk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurk2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://augury[.]pages[.]dev/
- hxxps://eiurkfjd[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://euphoriaroom-secondary[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://wtiuolk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://10514ne8xsbk786m7hix8j7g[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0623us20z[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://3qroiuwlk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://antivirus-28s[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://fddccvii5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://twiuelk5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://chuketiprupro[.]circulosely[.]my[.]id/win/index[.]php?vq=d/odAxmzNATFXmG+aqNIaWN2Tk45ZUgxWStNbGxpUWtITlUzV0luZkQ4emFuVmxXcGhoeCtMb0RYeUpEVldhQzhubFNqT1dSRm9hd2dnM0p1TUZ4TEwxclMyRDVhczRrR3dja1dBVXNEdndFRFl0NzZGdjEreGZSdXZWQkUwZU0xQ1ZnUmlCakFWNUo5akxqZU9JSEZUSXdmNlNrYXY4eHFBb3FmMkZNNTUyTlNEK3Z2OFRPR1dZV3NFNjY5bWl4U2ppRENwWWdFQzJqd2l3WQ==
- hxxps://gewtiurlfk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ksjfkkfjd[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=03-6110-0421
- hxxps://fastshoppingsite[.]org/good/Win0desk00Su10/index[.]html
- hxxps://reiulk12[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fddccvii2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://himduznmm1[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-297-7247
- hxxps://browser-3tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewutrkl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://26maccouijgdvxui002[.]z19[.]web[.]core[.]windows[.]net/Ma012ch1delpSh012/index[.]html?Aniph=1-860-364-8890
- hxxps://rewiou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ytoipojl2-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://iutewrlkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nammm3[.]z7[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=0101(855)550-3148
- hxxps://yusss2894now[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-907-1127
- hxxps://wtiuolk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://forwaaardddsecccureeddm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://ms-0nli3-c0nnect734892[.]sbs/win/index[.]html?call=null
- hxxps://iutewrlkj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hiijjjiikkk2-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://gewtiurlfk00-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tuiwlke-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurk3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://viruswarning0625us10a[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://aaudsijk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiukd89[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beeiiujii4[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
- hxxps://erwiuflkjl3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://coral-app-xjya9[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://rewiou3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiulk32[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://eiurkfjd-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tech2[.]kyko[.]info/?utm_medium=paid
- hxxps://heeeuuiinn1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://3qroiuwlk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronfvahjs85[.]z13[.]web[.]core[.]windows[.]net/?_event=26b2342a97f74de62fb258d82854f52b&click_id=1f287rihmc94sv4r&tid=4&subid=twiyter[.]com&ref=twiyter[.]com&3
- hxxps://ewfkjd1[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://owuplk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewilurkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rieulkj5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://aaudsijk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qeriuo4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://lilijjhui4-secondary[.]z7[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81826-41446
- hxxps://3qroiuwlk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://esirufkj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://3qroiuwlk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wtiuolk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://6001znpnobkialupxwjeybvc[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d1cmqgdjrarc73ajjng0&sou=9c4e27abe67fccbd30bce576d&cost=imesh&ip=ww1[.]imesh[.]net&7=74[.]64[.]90[.]109&8=&9=
- hxxps://rwiyqkj3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronbjkm4esd3wa6[.]z13[.]web[.]core[.]windows[.]net/?_event=46e0435db917e8de9665250753d8b4d7&click_id=1f287rhrmcdnf6xb&tid=7&subid=twittre[.]com&ref=twittre[.]com&3
- hxxps://7008eaktjytfyeogwxbnreuf[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://viruswarning0626us22x[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://qeriuo[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://heeeuuiinn1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://sdkfkdlsdm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://rewiou4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://erwiuflkjl5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://troiuroi5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://akbbb2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
- hxxps://reiulk090-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://seahorse-app-a6sou[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
- hxxps://sakuragamespotio[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://reiukd89-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rwiyqkj00[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://rewiou1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trtjkdkjfdm66[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-80595-18715
- hxxps://owuplk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://skjdjdj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.