2025-07-02 - Tech Support Scam - Phishing Capmapign Observation Alert

136 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 136 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://qeriuo3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0627us57a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://komlopewert[.]pages[.]dev/
  •  hxxps://tronmjkf53ws6[.]z13[.]web[.]core[.]windows[.]net/?ip=76[.]27[.]137[.]134&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Comcast+Cable&org=Comcast+Cable&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Tennessee&city=Ooltewah&_event=0ad763c994769de9a42f1d3a447dda1c&click_id=1f287rhqmcdfjm8z&tid=12&subid=twitfer[.]com&ref=twitfer[.]com&3
  •  hxxps://dooommmdefffeendddrrr[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jiioo1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://3713b47a67eae213ce619947e381b6c64b86[.]b-cdn[.]net/?phone=0800-13-665
  •  hxxps://yeroiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://urchin-app-y729o[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://ms-alert[.]vercel[.]app/
  •  hxxps://officereports[.]pages[.]dev/
  •  hxxps://eriuhk1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://animeplayhub[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://yeroiulk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0701us10b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mkknbbiii9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tokyogameportalio[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://forwardfastscccannnnmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tronlkmaj2q6t[.]z13[.]web[.]core[.]windows[.]net/?ip=8[.]25[.]157[.]162&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F133[.]0[.]0[.]0+Safari%2F537[.]36+Edg%2F133[.]0[.]0[.]0&isp=Lumen&org=NSLIJHS&connectionType=Corporate&browser=Edge+133[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=New+York&city=Elmont&_event=85fbc3ee920deb04acbfcfacf016524f&click_id=1f28abylmckurx0m&tid=6&subid=eprovidertorchmarkcorp[.]com&ref=eprovidertorchmarkcorp[.]com&3
  •  hxxps://fffdddsssshhhhdefffeeend[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bauble[.]pages[.]dev/
  •  hxxps://beeiiujii1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://gewtiurlfk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://www[.]mesanterd[.]shop/support[.]html
  •  hxxps://weiourlkj6-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://forwardsecccureeescccan[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iutewrlkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qeriuo2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://anbb4-secondary[.]z9[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://ninjagameworld[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0627us26x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://weo8iurl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://anbb4[.]z9[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://fddccvii6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://python-6wg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sushigamelab[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://twioul5-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj90[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://king-prawn-app-7mofo[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://weiourlkj8-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://beeiiujii1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://gewtiurlfk5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trytryrersrew22-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://muicpyyyyyy[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-877-593-5743&_event=8cfbec1339618901d13c22afe11e6a52
  •  hxxps://mkknbbiii3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efrqiulk4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://popgamearena[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://kawaiiseductiontc-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://weo8iurl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fgdghpyyye[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0Err060/index[.]html?Aniph=1-844-590-4897
  •  hxxps://reoiutg-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://poignancy[.]pages[.]dev/
  •  hxxps://fulminate[.]pages[.]dev/
  •  hxxps://fffdddddssssddddhhhhgghh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://projectspdfs[.]pages[.]dev/
  •  hxxps://tronjkma4ed6tf[.]z13[.]web[.]core[.]windows[.]net/?ip=108[.]153[.]17[.]237&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Direcnet+S[.]a[.]c&org=Direcnet+S[.]a[.]c&connectionType=Corporate&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=&city=&_event=32f7552c37953690fb253d5da5262671&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
  •  hxxps://firmwaresecure[.]z13[.]web[.]core[.]windows[.]net/mac/index[.]html?call=1-860-370-4471
  •  hxxps://fddccvii1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kaan2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://jiikkii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-5164
  •  hxxps://triukjjkf4-secondary[.]z20[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://yeroiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://htlkjhcb[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://gfdglfkgfdieer41[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://gewruilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://globeswertsed[.]pages[.]dev/
  •  hxxps://estator[.]pages[.]dev/
  •  hxxps://eriulkiiyh9[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twioul1-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://stream-c85[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kinkinkyotome-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://wreukj5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fffdddhhhdddghhhhhddff[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pixelatedjapan-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://discretionary[.]pages[.]dev/
  •  hxxps://riutlkj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronkjmcs75rfe3[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
  •  hxxps://gewtiurlfk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewruilk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://skdkdk[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://weiourlkj7[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tttofns[.]onlinechatforu[.]store/
  •  hxxps://perspicuous[.]pages[.]dev/
  •  hxxps://weiourlkj4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://riutlkj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk8-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbhk84exzskj[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287rihmcdkzcyy&tid=12&subid=yojutube[.]com&ref=yojutube[.]com&3
  •  hxxps://ewtioulk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vrtynew832[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-793-4708
  •  hxxps://mastt2[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://ewlklujf[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dlsdllld[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://wreukj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efrqiulk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pseudocode-a2a[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://qeriuo3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kideviill5[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://sdasda-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://weriuiyt4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://riutlkj2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkjj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qeriuo5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkjj4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj5-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiaukjl5[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewtiurlfk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://triukjjkf[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://ninjagamespot[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0626us13a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://skew8hf478836617[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://wenferhgr[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://nostrum-8fo[.]pages[.]dev/
  •  hxxps://rarefied[.]pages[.]dev/
  •  hxxps://ewtioulk9-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gfdglfkgfdieer43-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
  •  hxxps://heyday-dn1[.]pages[.]dev/
  •  hxxps://heyday-dn1[.]pages[.]dev/ai2[.]mp3
  •  hxxps://eriulkjj5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trtf7656ffhfhfh[.]z21[.]web[.]core[.]windows[.]net/WKSHKDGYDHGJHGYS/index[.]html
  •  hxxps://gamesushihub[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://triukjjkf-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://viruswarning0701us03b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh8[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk9[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://poyioalan[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://kideviill7[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://mkknbbiii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wqriuelk7[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://efrqiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dhhhffffssssffffdddddhhh[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gewruilk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bentoboxbliss[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuol-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://augustfvc3ws287a[.]z13[.]web[.]core[.]windows[.]net/?click_id=1f287riamcdjxq4x&tid=6&subid=otka[.]com&ref=otka[.]com&2
  •  hxxps://mkknbbiii5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wt9eriu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gfdglfkgfdieer41-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://deployas[.]pages[.]dev/
  •  hxxps://eiaukjl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kyotogamecentral[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://gewruilk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://credo-6cb[.]pages[.]dev/
  •  hxxps://viruswarning0701us02b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://download-4s4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://mkknbbiii5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://domain-dhs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jhmzqzmgqz[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-371-1799
  •  hxxps://weo8iurl5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkjj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://security-chatbot-backup[.]vercel[.]app/
  •  hxxps://viruswarning0701us20b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh90[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronjkfv3wsa1q76[.]z13[.]web[.]core[.]windows[.]net/?ip=99[.]75[.]131[.]202&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=AT%26T+Internet&org=AT%26T+Internet&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Florida&city=Miami+Gardens&_event=d14d2262b899c035706cfd442cd9ad98&click_id=1f287rismcdix6ga&tid=3&subid=googre[.]com&ref=googre[.]com&3
  •  hxxps://fddccvii14-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj9-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriuhk3-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://viruswarning0627us47a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://utreghgvsdanvcnbva[.]z1[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://beeiiujii4-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://kideviill8-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://qeriuo-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iutewrlkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://zy293vh778754378[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://qeriuo5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yeroiulk2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mc7e0dz978921159[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://fddccvii15-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii14[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://o8ze7zc178924957[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://encryptactive[.]z13[.]web[.]core[.]windows[.]net/mac/index[.]html?call=1-866-240-3692
  •  hxxps://checkitmyself[.]azurewebsites[.]net/new/?tk=QC2GDqKNmrz0nhlRg74OcaY9Zb3TXW8i
  •  hxxps://reiwuqlk5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ftduyd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://prognosticate[.]pages[.]dev/
  •  hxxps://tewilk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sakuragameplace[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://9007vjcidozrclcezqojcgda[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wqriuelk1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://tokyoteaseweb-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://weiourlkj3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://document-485[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://foreeeevvveerrrcoorrrddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://fluxclimbflie[.]pages[.]dev/
  •  hxxps://fddccvii6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pladromjoulp[.]pages[.]dev/
  •  hxxps://wreukj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hummock[.]pages[.]dev/
  •  hxxps://sybarite[.]pages[.]dev/
  •  hxxps://eriulkiiyh6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twoiurlk1-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://tokyogamezonesite[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://reiwuqlk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh9-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yuui22r9now[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-888-844-2693
  •  hxxps://fddccvii12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronjkma4ed63w[.]z13[.]web[.]core[.]windows[.]net/?ip=98[.]183[.]216[.]110&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Cox+Communications&org=Cox+Communications&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Virginia&city=Norfolk&_event=53281fd9f3849b62ac606cddbf62be28&click_id=1f287rismcdossdu&tid=12&subid=twiyter[.]com&ref=twiyter[.]com&3
  •  hxxps://globemastersch[.]pages[.]dev/
  •  hxxps://wt9eriu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjdfjjdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://jadegameportal-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eromangamagicme-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://gamejapanhub[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://old[.]bioascent[.]com/?p=f7ecf429c1c4fdbd047599033ac0c77f&u=8665586d9c5b5d4c42144a591a4d545c400157174010504b540b4c175c13405d1807560e1a5d5f4b0b0c4d0e594f534a1b00080b4503445407540012565506015514080852
  •  hxxps://mordant[.]pages[.]dev/
  •  hxxps://silkendreams[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0701us09z[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ps[.]questpulse[.]us/assets/images/explore/veni[.]html
  •  hxxps://wreukj4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfgsfgdd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(0101)-80530-28801
  •  hxxps://plukedlopefluc[.]pages[.]dev/
  •  hxxps://yeroiulk2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wqriuelk7-secondary[.]z26[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://goldfish-app-te6fa[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://gewruilk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://anbb2-secondary[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://efrqiulk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjhfggtkjm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://mkknbbiii8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://trytryrersrew22[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://zv0u86x678924957[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://shurikenplay-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://weiourlkj2-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yub8bs23r7now[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(833)-534-9799
  •  hxxps://4d5c652bc6d145159a636[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kiloporeders[.]z1[.]web[.]core[.]windows[.]net/dv[.]html?
  •  hxxps://whale-app-3-vkm24[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://mangagamecenter[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mkknbbiii11[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewilk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://keblupro[.]hobberystally[.]my[.]id/win/index[.]php?vq=WrUTn5FR5fzisJhIxcvy/29vclhiWGRjMWdHd0oyWS9ad1B4b3VJQWdJc2FGYnJ2VFlIVnZvNE95R2VXcVFlaUt0SDdUOHg1ekdhd2c4TEFVVGFFdVF1RFgxVEtvV0ZPMHJSN1hscWpaMmJmd2JyR3haeGtYZ0JUam9GeDFFY2dCWWxzVS9yb095MFBrWmc3MVRyajN4OHRsbVMrMEpqcXdWSW5ud1E3a09IeFR2UCtPZDV5VkR0SExPM2MwbzNKdkdVcStlSUVKZnpkakpFeQ==
  •  hxxps://fddccvii1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efrqiulk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gfdglfkgfdieer43[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81855-41948
  •  hxxps://nod3cvee78928292[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://gewruilk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dkfkktld[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://eriulkiiyh2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wreukj44-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://arrogate[.]pages[.]dev/
  •  hxxps://eriulkjj5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://riutlkj3-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronmkclf73w2q8[.]z13[.]web[.]core[.]windows[.]net/?ip=138[.]43[.]89[.]13&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Midwest+Energy+%26+Communications&org=Midwest+Energy+%26+Communications&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Michigan&city=Dowagiac&_event=a8817b91a8c26c76fcf8ce3427787c98&click_id=1f28abzcmcjftlis&tid=3&subid=twitfer[.]com&ref=twitfer[.]com&3
  •  hxxps://efrqiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tokyogamezonesite-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://iutewrlkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iniquitous[.]pages[.]dev/
  •  hxxps://mw63x7xu78924957[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://skdkfkf[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://walrus-app-2-k3fbu[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://sakurasensationsss[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://kideviill8[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://gfalstsfatvihir[.]z19[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://java-6l0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://enclave-2q7[.]pages[.]dev/
  •  hxxps://fddccvii16-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0701us08x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtioulk7-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewruilk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0626us04x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ultimategamershub[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eriuhk-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://mkknbbiii10-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkiiyh3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://playjapangames[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mangagamehaven[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ewiukj5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://passionportal-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://village-os1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://viruswarning0627us25a[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0701us28b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://kaan2-secondary[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://tronblkmx732qa3[.]z13[.]web[.]core[.]windows[.]net/?ip=96[.]241[.]187[.]201&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Verizon+Fios&org=Verizon+Fios&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Maryland&city=Lanham&_event=71b05b69cfcd95f187b190441e3783ee&click_id=1f28abzcmcjftlis&tid=3&subid=twitfer[.]com&ref=twitfer[.]com&3
  •  hxxps://gewtiurlfk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewruilk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wreukj44[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ytxphyra78921159[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh00-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://location-6kg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://eriulkiiyh80-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qeriuo1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiaukjl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0701us13b[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yeroiulk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk8[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uhlcoaavrdctxl[.]z5[.]web[.]core[.]windows[.]net/winupet/index[.]html
  •  hxxps://uvtorikower-secondary[.]z13[.]web[.]core[.]windows[.]net/f2970/index[.]html?clickid=d1er1s55sqmc73cfs6t0
  •  hxxps://demotiscccannnssecuree[.]z11[.]web[.]core[.]windows[.]net/
  •  hxxps://iutewrlkj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fluteflopwsecv[.]pages[.]dev/
  •  hxxps://gewtiurlfk00[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mincing[.]pages[.]dev/
  •  hxxps://forrrrwarrdddhhhelsecur[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wreukj3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twioul4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sakuragameworld[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://phone-dk7[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://viruswarning0627fr01[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://liquid-7tc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://efrqiulk5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sushigamelab-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkjj2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://disquisition[.]pages[.]dev/
  •  hxxps://ewnfiewhf[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://weiourlkj6[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://domain-6xc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://weiourlkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iutewrlkj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://whale-app-yfwdn[.]ondigitalocean[.]app/
  •  hxxps://tewiuol1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://otakugamefind[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mkknbbiii1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twioul3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jiioo4[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://ewiukj5-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://drifffftiiinngggsssdddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://mkknbbiii1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tutelage[.]pages[.]dev/
  •  hxxps://tieuglfkjd1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eronipponlove[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://pertinacious[.]pages[.]dev/
  •  hxxps://oiutewgl5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-590-4313
  •  hxxps://yeroiulk3-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://efrqiulk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bairaclose[.]pages[.]dev/
  •  hxxps://eiaukjl4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iutewrlkj4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0630us20z[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tieuglfkjd4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hyy723r9now[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-310-0128
  •  hxxps://gewruilk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj9[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twioul[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://newserverlelo-gwf2ecafaec9dsbk[.]centralus-01[.]azurewebsites[.]net/?tk=UgTpDWQfjPev3LECBnI42qokJ8txd1c6
  •  hxxps://fddccvii15[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://viruswarning0701fr04[.]z28[.]web[.]core[.]windows[.]net/
  •  hxxps://fddccvii11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://win-defender-errerport[.]sikivoice[.]site/
  •  hxxps://virtualarenaspace[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://anbb1-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://eriulkiiyh1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://garish[.]pages[.]dev/
  •  hxxps://d417d169c7fe4df1a3243[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gfdglfkgfdieer42[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-81867-54380
  •  hxxps://eiaukjl4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weo8iurl2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://010725uuuuuuuukkkkkk0061[.]z35[.]web[.]core[.]windows[.]net/
  •  hxxps://kawaiigamehaven[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkjj3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ssjwdu0e78921159[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://ueh34hsm78921159[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://animeplayhub-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://efrqiulk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iutewrlkj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://zum4ye8y78928292[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://readjustment[.]pages[.]dev/
  •  hxxps://samuraiplaybase-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mkknbbiii4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weiourlkj8[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sklkkdk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://wtiuolk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mqol2x9g78750261[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0627us16x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://1020ffzvuojstpwosogdkovj[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nachaseric[.]hobberystally[.]my[.]id/win/index[.]php?vq=T/8q9hvY5Q5G6MvUvGOc72ZhZ3E2Q05VUnp4WGJmWVRwNFF3ZkplQmFGR0pPWWYwYlRTalpjSjVObHl2dSs3ZCtYMXEzU0NIczlQQ3NTbUVtV1VxTzVxRHhMUzJRd3MvQkdjQjEzeVcvN0grS1lxV2lIWmFnNWZ0cnJiRnJNZGFFUkFVMnRpazFTVHk2eENROU5jQlIvR1pITXNpenZIY1VvL0h5U1BQWEpwY1ZNUERJOUtWQVRkK2xJRTRxVGF5OG04TFZFT3h1Y0tEKzNQTQ==
  •  hxxps://fddccvii13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://euphoriaroom-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://mta2-hdfjj-jfdhdfjd-hdfhdj[.]vercel[.]app/win/index[.]html?call=null
  •  hxxps://wtiuolk5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://globaldroper[.]pages[.]dev/
  •  hxxps://kyotogamecentral-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://weiourlkj7-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fddccvii5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtioulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewtiurlfk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://powderblue-baboon-864141[.]hostingersite[.]com/
  •  hxxps://fddccvii2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://riutlkj2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewiukj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewruilk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://himduznmm1[.]z14[.]web[.]core[.]windows[.]net/?ph0nq=1-888-297-7247
  •  hxxps://browser-3tf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ountebank[.]pages[.]dev/
  •  hxxps://26maccouijgdvxui002[.]z19[.]web[.]core[.]windows[.]net/Ma012ch1delpSh012/index[.]html?Aniph=1-860-364-8890
  •  hxxps://mango-4or[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://88a58adf67c645c580e35[.]z13[.]web[.]core[.]windows[.]net/?&SUBID=d1fegl4irn0c738va120&sou=06b7dfc47edaf3b9838400098&cost=malware%20scan&ip=scanurl[.]net&7=68[.]160[.]234[.]173&8=&9=
  •  hxxps://iutewrlkj5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twioul1[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wreukj4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jwgiwj[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://forwaaardddsecccureeddm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://samuraiplayhouse[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://sunnn2[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://iutewrlkj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wreukj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yeroiulk1-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gewtiurlfk00-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tieuglfkjd1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://manumit[.]pages[.]dev/
  •  hxxps://tewiuol1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii2[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddddffffhhhhsssddddseccc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://beeiiujii4[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://ewtioulk7[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mangagamehaven-secondary[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://coral-app-xjya9[.]ondigitalocean[.]app/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://pixelatedjapan[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://twioul-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wreukj3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kideviill7-secondary[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://tech2[.]kyko[.]info/?utm_medium=paid
  •  hxxps://reiwuqlk3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eiaukjl2-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://penchant[.]pages[.]dev/
  •  hxxps://astringent[.]pages[.]dev/
  •  hxxps://security-chatbot-d5yn2nek4-sasas-projects-52bd5d1e[.]vercel[.]app/
  •  hxxps://ndite[.]pages[.]dev/
  •  hxxps://qeriuo4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jiioo4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://tewiuol3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dddffffdddddhhhsssdddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://eriulkiiyh8-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiuolk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eriulkjj1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronbjkm4esd3wa6[.]z13[.]web[.]core[.]windows[.]net/?_event=46e0435db917e8de9665250753d8b4d7&click_id=1f287rhrmcdnf6xb&tid=7&subid=twittre[.]com&ref=twittre[.]com&3
  •  hxxps://drifffftttiiiggggsssecc2[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tewiuol2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://security-508[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://viruswarning0626us22x[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ke6geny978921159[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://efrqiulk5[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qeriuo[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdkfkdlsdm[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/index[.]html?bcda=(03)-6110-0421
  •  hxxps://sunnn2-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87760-42260
  •  hxxps://triumvirate-5of[.]pages[.]dev/
  •  hxxps://cookieacceptfurniturexax[.]z13[.]web[.]core[.]windows[.]net/mac[.]html
  •  hxxps://ewtioulk3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mkknbbiii7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reiwuqlk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://diteeeecteccctfoorwaeddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://epicplaygrounds[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtioulk5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tewiuol4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://riutlkj3[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.