2025-07-01 - Tech Support Scam - Phishing Capmapign Observation Alert

86 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 86 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

hxxps://qeriuo3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0627us57a[.]z13[.]web[.]core[.]windows[.]net/
hxxps://komlopewert[.]pages[.]dev/
hxxps://wjehtiewu[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://tronmjkf53ws6[.]z13[.]web[.]core[.]windows[.]net/?ip=76[.]27[.]137[.]134&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Comcast+Cable&org=Comcast+Cable&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Tennessee&city=Ooltewah&_event=0ad763c994769de9a42f1d3a447dda1c&click_id=1f287rhqmcdfjm8z&tid=12&subid=twitfer[.]com&ref=twitfer[.]com&3
hxxps://dooommmdefffeendddrrr[.]z13[.]web[.]core[.]windows[.]net/
hxxps://jiioo1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://3713b47a67eae213ce619947e381b6c64b86[.]b-cdn[.]net/?phone=0800-13-665
hxxps://yeroiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://urchin-app-y729o[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://ms-alert[.]vercel[.]app/
hxxps://ewilurkj4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriuhk1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://animeplayhub[.]z31[.]web[.]core[.]windows[.]net/
hxxps://owuplk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yeroiulk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rieulkj2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jwfiewjf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://mkknbbiii9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewilurkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tokyogameportalio[.]z31[.]web[.]core[.]windows[.]net/
hxxps://forwardfastscccannnnmm[.]z13[.]web[.]core[.]windows[.]net/
hxxps://fffdddsssshhhhdefffeeend[.]z13[.]web[.]core[.]windows[.]net/
hxxps://bauble[.]pages[.]dev/
hxxps://beeiiujii1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://template-dp4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://gewtiurlfk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://www[.]mesanterd[.]shop/support[.]html
hxxps://weiourlkj6-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://forwardsecccureeescccan[.]z13[.]web[.]core[.]windows[.]net/
hxxps://iutewrlkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://hiijjjiikkk2[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://fddccvii5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://qeriuo2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://indigo-falcon-356665[.]hostingersite[.]com/win/index[.]html
hxxps://www[.]ipa[.]go[.]jp/security/anshin/measures/fa-experience[.]html
hxxps://wtiuolk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rieulkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ninjagameworld[.]z31[.]web[.]core[.]windows[.]net/
hxxps://wteoilk4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://owuplk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0627us26x[.]z13[.]web[.]core[.]windows[.]net/
hxxps://ewtioulk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://python-6wg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://sushigamelab[.]z31[.]web[.]core[.]windows[.]net/
hxxps://routerlopeasd[.]pages[.]dev/
hxxps://twioul5-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj90[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://king-prawn-app-7mofo[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://weiourlkj8-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://akbbb2-secondary[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://beeiiujii1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://gewtiurlfk5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://trytryrersrew22-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://mkknbbiii3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewilurkj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewilurkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://popgamearena[.]z31[.]web[.]core[.]windows[.]net/
hxxps://kawaiiseductiontc-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://iukjrf1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fgdghpyyye[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-844-590-4897
hxxps://reoiutg-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://akbbb5[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-84459-53700
hxxps://dom-d44[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://fulminate[.]pages[.]dev/
hxxps://fffdddddssssddddhhhhgghh[.]z13[.]web[.]core[.]windows[.]net/
hxxps://tronjkma4ed6tf[.]z13[.]web[.]core[.]windows[.]net/?ip=108[.]153[.]17[.]237&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Direcnet+S[.]a[.]c&org=Direcnet+S[.]a[.]c&connectionType=Corporate&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=&city=&_event=32f7552c37953690fb253d5da5262671&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
hxxps://firmwaresecure[.]z13[.]web[.]core[.]windows[.]net/mac/index[.]html?call=1-860-370-4471
hxxps://fddccvii1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kaan2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://wteoilk2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jiikkii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-5164
hxxps://triukjjkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://owuplk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yeroiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://htlkjhcb[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://gfdglfkgfdieer41[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://krkekek[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1800-320-815
hxxps://globeswertsed[.]pages[.]dev/
hxxps://estator[.]pages[.]dev/
hxxps://eriulkiiyh9[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://twioul1-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kinkinkyotome-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://eriulkiiyh4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fffdddhhhdddghhhhhddff[.]z13[.]web[.]core[.]windows[.]net/
hxxps://iukjrf-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://discretionary[.]pages[.]dev/
hxxps://riutlkj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wteoilk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronkjmcs75rfe3[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
hxxps://gewtiurlfk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://skdkdk[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://weiourlkj7[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tttofns[.]onlinechatforu[.]store/
hxxps://perspicuous[.]pages[.]dev/
hxxps://iukjrf2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://riutlkj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rieulkj1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk8-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rieulkj3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronbhk84exzskj[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
hxxps://ewtioulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://vrtynew832[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-793-4708
hxxps://mastt2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://ewlklujf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://dlsdllld[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://weiourlkj3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://pseudocode-a2a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://qeriuo3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iukjrf4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://sdasda-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://riutlkj2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rewiou3[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wteoilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://qeriuo5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://qwkjriewf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://wteoilk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj5-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eiaukjl5[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gewtiurlfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://triukjjkf[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://ninjagamespot[.]z31[.]web[.]core[.]windows[.]net/
hxxps://viruswarning0626us13a[.]z13[.]web[.]core[.]windows[.]net/
hxxps://skew8hf478836617[.]z22[.]web[.]core[.]windows[.]net/
hxxps://wenferhgr[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://nostrum-8fo[.]pages[.]dev/
hxxps://ewtioulk9-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gfdglfkgfdieer43-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
hxxps://heyday-dn1[.]pages[.]dev/
hxxps://heyday-dn1[.]pages[.]dev/ai2[.]mp3
hxxps://trtf7656ffhfhfh[.]z21[.]web[.]core[.]windows[.]net/WKSHKDGYDHGJHGYS/index[.]html
hxxps://gamesushihub[.]z31[.]web[.]core[.]windows[.]net/
hxxps://triukjjkf-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://owuplk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh8[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk9[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://poyioalan[.]z19[.]web[.]core[.]windows[.]net/
hxxps://gamerskyoto[.]z31[.]web[.]core[.]windows[.]net/
hxxps://mkknbbiii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wqriuelk7[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://dhhhffffssssffffdddddhhh[.]z13[.]web[.]core[.]windows[.]net/
hxxps://rewiou2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://bentoboxbliss[.]z31[.]web[.]core[.]windows[.]net/
hxxps://owuplk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rewiou1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://augustfvc3ws287a[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287riamcdjxq4x&tid=6&subid=otka[.]com&ref=otka[.]com&2
hxxps://owuplk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://owuplk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wt9eriu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gfdglfkgfdieer41-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://eiaukjl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kyotogamecentral[.]z31[.]web[.]core[.]windows[.]net/
hxxps://eriulkiiyh6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://download-4s4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://mkknbbiii5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kjdfjksjd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://domain-dhs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://jhmzqzmgqz[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-371-1799
hxxps://tewiuol4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://nihonnightstech[.]z31[.]web[.]core[.]windows[.]net/
hxxps://security-chatbot-backup[.]vercel[.]app/
hxxps://ewilurkj3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh90[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronjkfv3wsa1q76[.]z13[.]web[.]core[.]windows[.]net/?ip=99[.]75[.]131[.]202&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=AT%26T+Internet&org=AT%26T+Internet&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Florida&city=Miami+Gardens&_event=d14d2262b899c035706cfd442cd9ad98&click_id=1f287rismcdix6ga&tid=3&subid=googre[.]com&ref=googre[.]com&3
hxxps://fddccvii14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj9-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0627us47a[.]z13[.]web[.]core[.]windows[.]net/
hxxps://beeiiujii4-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://qeriuo-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iutewrlkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://zy293vh778754378[.]z22[.]web[.]core[.]windows[.]net/
hxxps://qeriuo5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yeroiulk2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewhfeg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://mango-d5t[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://fddccvii15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii14[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://encryptactive[.]z13[.]web[.]core[.]windows[.]net/mac/index[.]html?call=1-866-240-3692
hxxps://wteoilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ftduyd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://prognosticate[.]pages[.]dev/
hxxps://tewilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://sakuragameplace[.]z31[.]web[.]core[.]windows[.]net/
hxxps://wteoilk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://9007vjcidozrclcezqojcgda[.]z13[.]web[.]core[.]windows[.]net/
hxxps://wqriuelk1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://tokyoteaseweb-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://weiourlkj3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://document-485[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://dkskdmv[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://wteoilk5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://foreeeevvveerrrcoorrrddd[.]z13[.]web[.]core[.]windows[.]net/
hxxps://fluxclimbflie[.]pages[.]dev/
hxxps://fddccvii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://pladromjoulp[.]pages[.]dev/
hxxps://trewoi-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://hummock[.]pages[.]dev/
hxxps://sybarite[.]pages[.]dev/
hxxps://eriulkiiyh6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tokyogamezonesite[.]z31[.]web[.]core[.]windows[.]net/
hxxps://reiwuqlk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh9-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yuui22r9now[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-888-844-2693
hxxps://owuplk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronjkma4ed63w[.]z13[.]web[.]core[.]windows[.]net/?ip=98[.]183[.]216[.]110&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Cox+Communications&org=Cox+Communications&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Virginia&city=Norfolk&_event=53281fd9f3849b62ac606cddbf62be28&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
hxxps://globemastersch[.]pages[.]dev/
hxxps://wt9eriu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kjdfjjdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://eromangamagicme-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://gamejapanhub[.]z31[.]web[.]core[.]windows[.]net/
hxxps://tronmjkad5ra8[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
hxxps://old[.]bioascent[.]com/?p=f7ecf429c1c4fdbd047599033ac0c77f&u=8665586d9c5b5d4c42144a591a4d545c400157174010504b540b4c175c13405d1807560e1a5d5f4b0b0c4d0e594f534a1b00080b4503445407540012565506015514080852
hxxps://mordant[.]pages[.]dev/
hxxps://silkendreams[.]z31[.]web[.]core[.]windows[.]net/
hxxps://ps[.]questpulse[.]us/assets/images/explore/veni[.]html
hxxps://ewilurkj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://nastasia[.]z1[.]web[.]core[.]windows[.]net/?tk=Kq724E9Zwv8WPNaAgbfhXm1RHl3DYkTp
hxxps://plukedlopefluc[.]pages[.]dev/
hxxps://yeroiulk2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wqriuelk7-secondary[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://goldfish-app-te6fa[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://kjhfggtkjm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://mkknbbiii8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://trytryrersrew22[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://weiourlkj2-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yub8bs23r7now[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(833)-534-9799
hxxps://4d5c652bc6d145159a636[.]z13[.]web[.]core[.]windows[.]net/
hxxps://kiloporeders[.]z1[.]web[.]core[.]windows[.]net/dv[.]html?
hxxps://whale-app-3-vkm24[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://mangagamecenter[.]z31[.]web[.]core[.]windows[.]net/
hxxps://mkknbbiii11[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://keblupro[.]hobberystally[.]my[.]id/win/index[.]php?vq=WrUTn5FR5fzisJhIxcvy/29vclhiWGRjMWdHd0oyWS9ad1B4b3VJQWdJc2FGYnJ2VFlIVnZvNE95R2VXcVFlaUt0SDdUOHg1ekdhd2c4TEFVVGFFdVF1RFgxVEtvV0ZPMHJSN1hscWpaMmJmd2JyR3haeGtYZ0JUam9GeDFFY2dCWWxzVS9yb095MFBrWmc3MVRyajN4OHRsbVMrMEpqcXdWSW5ud1E3a09IeFR2UCtPZDV5VkR0SExPM2MwbzNKdkdVcStlSUVKZnpkakpFeQ==
hxxps://fddccvii1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gfdglfkgfdieer43[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
hxxps://dkfkktld[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://eriulkiiyh2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://riutlkj3-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronmkclf73w2q8[.]z13[.]web[.]core[.]windows[.]net/?ip=138[.]43[.]89[.]13&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Midwest+Energy+%26+Communications&org=Midwest+Energy+%26+Communications&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Michigan&city=Dowagiac&_event=a8817b91a8c26c76fcf8ce3427787c98&click_id=1f28abzcmcjftlis&tid=3&subid=twitfer[.]com&ref=twitfer[.]com&3
hxxps://tronmjakd5ra8[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
hxxps://domain-4iq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://iutewrlkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iniquitous[.]pages[.]dev/
hxxps://skdkfkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://walrus-app-2-k3fbu[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://sakurasensationsss[.]z31[.]web[.]core[.]windows[.]net/
hxxps://ewilurkj3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://domain-ezg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://gfalstsfatvihir[.]z19[.]web[.]core[.]windows[.]net/winupet/index[.]html
hxxps://java-6l0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://errorks0x0091sda[.]z13[.]web[.]core[.]windows[.]net/Ma010ch1delpSh010/index[.]html?Aniph=1-877-593-9687
hxxps://enclave-2q7[.]pages[.]dev/
hxxps://fddccvii16-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gcgfchgchjghj-coral-app-k26xb[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
hxxps://rieulkj5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0626us04x[.]z13[.]web[.]core[.]windows[.]net/
hxxps://wteoilk4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriuhk-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://mkknbbiii10-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://playjapangames[.]z31[.]web[.]core[.]windows[.]net/
hxxps://mangagamehaven[.]z31[.]web[.]core[.]windows[.]net/
hxxps://jkdntjjdkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://passionportal-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://akbbb5-secondary[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-84459-53700
hxxps://village-os1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://wteoilk00[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0627us25a[.]z13[.]web[.]core[.]windows[.]net/
hxxps://rewiou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kaan2-secondary[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://tronblkmx732qa3[.]z13[.]web[.]core[.]windows[.]net/?ip=96[.]241[.]187[.]201&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Verizon+Fios&org=Verizon+Fios&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Maryland&city=Lanham&_event=71b05b69cfcd95f187b190441e3783ee&click_id=1f28abzcmcjftlis&tid=3&subid=twitfer[.]com&ref=twitfer[.]com&3
hxxps://gewtiurlfk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh00-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://location-6kg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://eriulkiiyh80-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewilurkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://qeriuo1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eiaukjl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://dkkfkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://elasticfrogkinf[.]pages[.]dev/
hxxps://rieulkj4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://yeroiulk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk8[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://uhlcoaavrdctxl[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
hxxps://gamearcadejapan[.]z31[.]web[.]core[.]windows[.]net/
hxxps://uvtorikower-secondary[.]z13[.]web[.]core[.]windows[.]net/f2970/index[.]html?clickid=d1er1s55sqmc73cfs6t0
hxxps://tronbljams94e6[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
hxxps://wteoilk00-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://demotiscccannnssecuree[.]z11[.]web[.]core[.]windows[.]net/
hxxps://iutewrlkj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iukjrf5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gewtiurlfk00[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronjkma9s5rd7[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
hxxps://viruswarning0625us01f[.]z13[.]web[.]core[.]windows[.]net/
hxxps://mincing[.]pages[.]dev/
hxxps://rewiou4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://forrrrwarrdddhhhelsecur[.]z13[.]web[.]core[.]windows[.]net/
hxxps://twioul4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://sakuragameworld[.]z31[.]web[.]core[.]windows[.]net/
hxxps://eriulkiiyh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://phone-dk7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://viruswarning0627fr01[.]z13[.]web[.]core[.]windows[.]net/
hxxps://rieulkj1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://disquisition[.]pages[.]dev/
hxxps://ewnfiewhf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://tronjx4ea8s6[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rhcmcc1awts&tid=3&subid=tywitter[.]com&ref=tywitter[.]com&3
hxxps://iukjrf5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj6[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://domain-6xc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://weiourlkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iutewrlkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://hiijjjiikkk3-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://tewiuol1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jpopgamehub[.]z31[.]web[.]core[.]windows[.]net/
hxxps://pixelsamurainet[.]z31[.]web[.]core[.]windows[.]net/
hxxps://otakugamefind[.]z31[.]web[.]core[.]windows[.]net/
hxxps://mkknbbiii1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://twioul3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jiioo4[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://ewilurkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eronipponlove[.]z31[.]web[.]core[.]windows[.]net/
hxxps://pertinacious[.]pages[.]dev/
hxxps://oiutewgl5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-4313
hxxps://yeroiulk3-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eiaukjl4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iutewrlkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0630us20z[.]z13[.]web[.]core[.]windows[.]net/
hxxps://ewilurkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj9[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://rieulkj2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://twioul[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii15[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://iukjrf2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://win-defender-errerport[.]sikivoice[.]site/
hxxps://eriulkiiyh1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://garish[.]pages[.]dev/
hxxps://d417d169c7fe4df1a3243[.]z13[.]web[.]core[.]windows[.]net/
hxxps://gfdglfkgfdieer42[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
hxxps://ewilurkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eiaukjl4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://kawaiigamehaven[.]z31[.]web[.]core[.]windows[.]net/
hxxps://iutewrlkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://readjustment[.]pages[.]dev/
hxxps://football-e9x[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://mkknbbiii4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://weiourlkj8[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://sklkkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://wtiuolk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mqol2x9g78750261[.]z22[.]web[.]core[.]windows[.]net/
hxxps://viruswarning0627us16x[.]z13[.]web[.]core[.]windows[.]net/
hxxps://1020ffzvuojstpwosogdkovj[.]z13[.]web[.]core[.]windows[.]net/
hxxps://fddccvii13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://euphoriaroom-secondary[.]z31[.]web[.]core[.]windows[.]net/
hxxps://mta2-hdfjj-jfdhdfjd-hdfhdj[.]vercel[.]app/win/index[.]html?call=null
hxxps://wtiuolk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://10514ne8xsbk786m7hix8j7g[.]z13[.]web[.]core[.]windows[.]net/
hxxps://weiourlkj7-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://fddccvii5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewtioulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gewtiurlfk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://powderblue-baboon-864141[.]hostingersite[.]com/
hxxps://fddccvii2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://riutlkj2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://himduznmm1[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-297-7247
hxxps://browser-3tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://ountebank[.]pages[.]dev/
hxxps://26maccouijgdvxui002[.]z19[.]web[.]core[.]windows[.]net/Ma012ch1delpSh012/index[.]html?Aniph=1-860-364-8890
hxxps://mango-4or[.]pages[.]dev/Wi0n0erAry0mpAlert048/
hxxps://rewiou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://88a58adf67c645c580e35[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d1fegl4irn0c738va120&sou=06b7dfc47edaf3b9838400098&cost=malware%20scan&ip=scanurl[.]net&7=68[.]160[.]234[.]173&8=&9=
hxxps://iutewrlkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://twioul1[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://reiwuqlk4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jwgiwj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://forwaaardddsecccureeddm[.]z13[.]web[.]core[.]windows[.]net/
hxxps://samuraiplayhouse[.]z31[.]web[.]core[.]windows[.]net/
hxxps://sunnn2[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://iutewrlkj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://hiijjjiikkk2-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://yeroiulk1-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://gewtiurlfk00-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://eriulkiiyh2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0625us10a[.]z13[.]web[.]core[.]windows[.]net/
hxxps://tewiuol5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://beeiiujii4[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://ewtioulk7[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://coral-app-xjya9[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://pixelatedjapan[.]z31[.]web[.]core[.]windows[.]net/
hxxps://rewiou3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://twioul-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tech2[.]kyko[.]info/?utm_medium=paid
hxxps://reiwuqlk3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://heeeuuiinn1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://eiaukjl2-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://owuplk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://ewilurkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://penchant[.]pages[.]dev/
hxxps://rieulkj5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://astringent[.]pages[.]dev/
hxxps://security-chatbot-d5yn2nek4-sasas-projects-52bd5d1e[.]vercel[.]app/
hxxps://ndite[.]pages[.]dev/
hxxps://qeriuo4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://jiioo4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://tewiuol3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://dddffffdddddhhhsssdddd[.]z13[.]web[.]core[.]windows[.]net/
hxxps://eriulkiiyh8-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://wtiuolk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tronbjkm4esd3wa6[.]z13[.]web[.]core[.]windows[.]net/?_event=46e0435db917e8de9665250753d8b4d7&click_id=1f287rhrmcdnf6xb&tid=7&subid=twittre[.]com&ref=twittre[.]com&3
hxxps://tewiuol2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://viruswarning0626us22x[.]z13[.]web[.]core[.]windows[.]net/
hxxps://qeriuo[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://heeeuuiinn1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://sdkfkdlsdm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://sunnn2-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
hxxps://triumvirate-5of[.]pages[.]dev/
hxxps://rewiou4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://cookieacceptfurniturexax[.]z13[.]web[.]core[.]windows[.]net/mac[.]html
hxxps://ewtioulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://mkknbbiii7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://akbbb2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-85555-03148
hxxps://reiwuqlk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://diteeeecteccctfoorwaeddd[.]z13[.]web[.]core[.]windows[.]net/
hxxps://ewtioulk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://tewiuol4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://riutlkj3[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://seahorse-app-a6sou[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
hxxps://sakuragamespotio[.]z31[.]web[.]core[.]windows[.]net/
hxxps://rewiou1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://owuplk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
hxxps://skjdjdj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:

If you entered any personal information, change all passwords and alert your bank and credit card companies.
Enable multi factor authentication to prevent access from attacker.
If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.

NOLA Defense

Search This Blog