118 Phishing Websites for Tech Support Scam Detected in the Past 24 hours
This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 118 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs
- hxxps://vweiru[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwriruy[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui6-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tytyutyuye56[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://ghsdcvdghcgh6ffyyyddgdgcdcc[.]pages[.]dev/
- hxxps://vweroiulk2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://9001diusxoywpehxlowpyetd[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://xmngj[.]pages[.]dev/
- hxxps://reiewukj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://github-49x[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://6880c4a4e78707e6bed9645b--mellow-torte-9c082e[.]netlify[.]app/oc[.]html
- hxxps://tweetiulk1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi10[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio11[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk4[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://poeee1[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://vweroi-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://software-ay5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tweetiulk5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio13-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk3[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://manage-373[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewwtgfh3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://netflix-ehb[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://mistyrose-swan-159896[.]hostingersite[.]com/mac/index[.]html
- hxxps://dfffdddeccccdddehminnm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://link-70i[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://assdgf10jgh[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://wiequryd2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hslvandrenowmrngnorheircenichbidilcvxfs[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://akllll2-secondary[.]z33[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
- hxxps://veriuqkj2[.]z32[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://ewiukj8687-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio14[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beowik2-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://faaststtttraawwserrvicee[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vwriulk5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beowik2[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dailydeal[.]today/Wi060nh1delpShnt602/index[.]html
- hxxps://mnghd[.]pages[.]dev/
- hxxps://nrtg45dnhn[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpErr001/index[.]html
- hxxps://v4iewur3-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hotstar-9cw[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewriouty5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://kfkdfjlkdsj-lphin-app-zabm6[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
- hxxps://vwriulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://uwefwhg[.]pages[.]dev/
- hxxps://arwqiu1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gdvghjhjtr[.]pages[.]dev/
- hxxps://vweroi[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio13[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio21[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sports-6f4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://utretraokfevvx-secondary[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d21997d5sqmc73d2l0eg
- hxxps://neeuio20[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui7[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://asdfd18hbk[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://hpwwjdpdzpq[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://gweiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://treriukj-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://facts-84g[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://b4weoii-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nyaganmendumvaratuthikkumayamhane[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://arwqiu2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gita-bnq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v4iewur3[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://msflwrcbgnalezgbcnflpcutbvyeqlaptbvndh[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://qwriruy2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio11-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi30[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkmfv7ya5dr[.]z13[.]web[.]core[.]windows[.]net/?ip=76[.]34[.]25[.]31&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Spectrum&org=Spectrum&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Indiana&city=Jeffersonville&_event=9675ba831c2f999b23849f2acf859d73&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://beowik3-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio14-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dhhhhddddhhbbbmmmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://fghjbgybjg[.]pages[.]dev/
- hxxps://vweroiulk5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwriruy1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dcbhsvbieuh[.]pages[.]dev/
- hxxps://train-3oz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v1v032[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://nannpayyye[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
- hxxps://neeuio15-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fxzntainouregcuyioihvndhamainlarssamksq[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://tweetiulk3-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ice-8c5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v1v032-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiukj977-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://security-warningwinodwsforyou-cfvl6[.]ondigitalocean[.]app/
- hxxps://vweriklj4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://adskbj4khbm[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://forwarrrddddclliccdinmm[.]z13[.]web[.]core[.]windows[.]net/?tk=cBWzAp1kImR4nGrUCxtJw5Odf06PNTDK
- hxxps://vewroi00[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio18-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://decccreasmmmndddmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://v1v029-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://domain-b0h[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://9593bf5f616g2244198a26[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://login-bt6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio7[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://1025yruxwqedpb0xyysy6p44[.]z13[.]web[.]core[.]windows[.]net/?&GLD=d20jv4p2ukcc73bv8kfg&U=5711253c52a52acfcb34abc70&C=faceb00k[.]com&I=faceb00k[.]com&G=66[.]229[.]79[.]93&H=&J=
- hxxps://trondjkmad3ws4d8[.]z13[.]web[.]core[.]windows[.]net/?ip=97[.]129[.]97[.]238&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Verizon+5g+Home+Internet&org=Verizon+5g+Home+Internet&connectionType=Cellular&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=North+Carolina&city=Matthews&_event=6b16d3c174be4b379b6776dc78f5ba54&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://neeuio12[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio23[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://voiutewre[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://coral-app-salgk[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7515
- hxxps://neeuio8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://jhdfhjsh[.]pages[.]dev/
- hxxps://silver-dog-346474[.]hostingersite[.]com/win/index[.]html
- hxxps://wiequryd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sql-egs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vweroiulk5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://asnklfekhasjkbassjvjvhsa[.]pages[.]dev/
- hxxps://vetyfyui5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://poeee5[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://tronlkamx2qaws3[.]z13[.]web[.]core[.]windows[.]net/?ip=71[.]229[.]125[.]0&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Comcast+Cable&org=Comcast+Cable&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Florida&city=Hollywood&_event=d362c61b913387ed865bbf5ec8314ff4&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://goldfish-app-9rsir[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7511
- hxxps://frwqrueyhj1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://7022vdpppcpxrzugpfqzvahu[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vewroi40-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://cho2-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://neeuio20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://fbbgjdf[.]pages[.]dev/
- hxxps://vetyfyui6[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dbgdsjhsk[.]pages[.]dev/
- hxxps://voiutewre3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beowik3[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://bjjbhjcbhcshvcsvxcxcbhacbxhbxz[.]pages[.]dev/
- hxxps://assets-bs4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-833-808-1056
- hxxps://werqkj1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi00-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dddhhhhfffmddddjjjmmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://weroiulkj3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://stingray-app-2-yapjx[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7517
- hxxps://ewwtgfh2[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://yytutyyfggddd85-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://mainuseadmin065[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
- hxxps://tab-7j6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vweroiulk2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://shark-app-b6a85[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7517
- hxxps://photo-cya[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://worker-bqu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://horse-2wi[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v1v028[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwriruy4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://treoipo-secondary[.]z15[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=+1-855-568-1647
- hxxps://b4weoii4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://issue-89e[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://frwqrueyhj1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://bsbjsjmsb[.]pages[.]dev/
- hxxps://beowik-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://poeee3-secondary[.]z33[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://687a3870f997f704a595ff0c--ephemeral-griffin-c14e92[.]netlify[.]app/oc[.]html
- hxxps://ewriouty3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://collapse-bu3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://hndbidtu[.]pages[.]dev/
- hxxps://8021xhfbnnbkupowwkjeutbp[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://qwriruy4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronfcjknamd4es3[.]z13[.]web[.]core[.]windows[.]net/?ip=38[.]13[.]162[.]149&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=FiberPower&org=FiberPower&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Minnesota&city=Minneapolis&_event=2a5c95a98b94e9d97a42e3ad30636cae&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://geeuiop2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://derirrecdddcoddddscnnm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vweriklj6[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi40[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty7[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi50-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://get-cmc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://zrwereneprietbegnyebhswqmbcgbsmsgv[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://dfghbdjgju[.]pages[.]dev/
- hxxps://weroiulkj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hezzfidzz[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://voiutewre-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tytyutyuye54-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://software-1xf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vwriulk1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur2-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://explore-edk[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://arwqiu5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio8-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v1v030-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur6[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-513-1430
- hxxps://freiqou3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gtqnwhiiiiznzwli[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://folder-5b2[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://freiqou4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj2[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v32irouwl1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://secreat[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://arwqiu5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj2-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://6007ibqbuphgksyhzmdiwgxp[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://vwriulk4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://storage-77z[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vetyfyui-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwriruy3-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur6-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dffffdddfffhhhhkkmmmn[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://arwqiu4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dfffhhhddddffhhhhddddmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://qwriruy1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://note-cg6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://miniprojects-36x[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://finish-544[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://zhuthainaikaiyilaarthaiuttuthuzws[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://poeee5-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://ewriouty5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio18[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v1v028-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v1v031[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ahgfweygtfew[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7520
- hxxps://weroiulkj5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh2-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio23-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://clownfish-app-8n8tk[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7521
- hxxps://neeuio24[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://onion-9mx[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://yutruy-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://goohfgtyhfgrt3[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
- hxxps://java-6zg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://fdjkdrtn[.]pages[.]dev/
- hxxps://slape[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://yytutyyfggddd81[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://frwqrueyhj3-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj4-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wefhewuigt[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7521
- hxxps://goofdcklkjb1[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
- hxxps://fxdzzvfb[.]pages[.]dev/
- hxxps://voiutewre3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v32irouwl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vccfcfvxfdfv[.]pages[.]dev/
- hxxps://center-2el[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vesuioi5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=+1-866-590-3964
- hxxps://wefjwfccd[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86659-03495
- hxxps://geeuiop6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://alarm-dbs[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vwriulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi20[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi10-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v32irouwl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ssb[.]girllivechat[.]space/
- hxxps://b4weoii2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio22[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj6-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://6880da826760215b0aff8e0a--mellow-torte-9c082e[.]netlify[.]app/oc[.]html
- hxxps://lkgfjjkjjk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=hoge
- hxxps://jakrogjhyzkw[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-383-5910
- hxxps://roof-5de[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://wiequryd4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://system-8gl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://wiequryd3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://6024rfvopfindfwfwhmgkocc[.]z13[.]web[.]core[.]windows[.]net/?
- hxxps://mongodb-f3m[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://qwriruy2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://machine-13k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://reiewukj4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vetyfyui4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkmc6ta53ws[.]z13[.]web[.]core[.]windows[.]net/?ip=98[.]25[.]214[.]193&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Spectrum&org=Spectrum&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=South+Carolina&city=Darlington&_event=866af3c6cba91696dea4d188107c9ad3&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://weriu30-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://mongo-udi[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v4iewur7-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop7-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://voiutewre1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://priboblada[.]leavily[.]my[.]id/win/index[.]php?vq=DoUW+cRwNLUHd2G80QXtkjNGYTAzaTJkdGtUUzdFcklQdzZWK2puV1J0OVd6Vyt1Q0ZTS24zSUxrL3JPSWMyVWI3VS9kT1NNeWgyRDFUOTNIWXZqY1F2SitPZm9zeUFJVEUrbzByOGFxR3V0K3BLMURhbmVRWlo0RmVpNkJxcHBlYy9IMmNtKzl1NHM1Y2JtZksvYjhWLzRqeU96QkVpd2k0Q2h4UXI5TCtBTHVhUllkRTdaYXBCeEVmWGhxay83dHlSMFZJTFR4QUdyYWdhNg==
- hxxps://v1v031-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://qwriruy-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio10[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://dffffddddddbbbbhhhnnmmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://skfkafdhvdavjdvjs[.]pages[.]dev/
- hxxps://neeuio24-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk4[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-337-1339
- hxxps://freiqou5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkmfv8a4es3ws[.]z13[.]web[.]core[.]windows[.]net/?ip=73[.]132[.]92[.]233&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Comcast+Cable&org=Comcast+Cable&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Maryland&city=Frederick&_event=8bde5886dd0d682505af158a1b73407e&click_id=1f28jglrmddhwoy2&tid=3&subid=kotschopshop[.]com&ref=kotschopshop[.]com&3
- hxxps://vweriklj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wqhrfwequfe[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?
- hxxps://ewwtgfh5-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ffrirstttdefenddddcorddm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://v4iewur7[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk1[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj4[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://upload-8bf[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ewriouty7-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://xyode2es80908186[.]z22[.]web[.]core[.]windows[.]net/
- hxxps://ewwtgfh1-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxp://www[.]web-page-hfevhrwaqxmumj[.]icu/ll2354/index[.]php
- hxxps://neeuio7-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi50[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weroiulkj4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://beowik1-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tytyutyuye52[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://fjhhfdfgruy[.]pages[.]dev/
- hxxps://reiewukj5[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://upi-dns[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://stingray-app-2-98u49[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7512
- hxxps://ewriouty1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v32irouwl3-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ppt-8db[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://ndufuajkd[.]pages[.]dev/
- hxxps://reiewukj4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vpyigifsove[.]z31[.]web[.]core[.]windows[.]net/
- hxxps://management-65n[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vweiru3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://css-1cy[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio17-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj3[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://house-8t3[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v4iewur1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiukj8687[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://import-7jq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://zip-6p4[.]pages[.]dev/Ma0c0erAry0mpAlert048/
- hxxps://b4weoii2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh1[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ashjv17gyjh[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://vweroi2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewiukj977[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty3-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://workers-1dz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://nannpayyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
- hxxps://neeuio16[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroiulk3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://cfrn37mt925ku84sqj103blr[.]z8[.]web[.]core[.]windows[.]net/
- hxxps://dfhgfdff[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7512
- hxxps://chair-2er[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tronlkma9d2aws[.]z13[.]web[.]core[.]windows[.]net/?ip=173[.]0[.]105[.]174&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Atlas+Networks&org=Atlas+Networks&connectionType=Corporate&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Oregon&city=Portland&_event=25b13798930402f33e1d6491c3946189&click_id=1f28jglemdgbxsku&tid=6&subid=carmaxs[.]com&ref=carmaxs[.]com&3
- hxxps://arwqiu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweiru4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio10-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweriklj5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wehgfuewfw[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86659-03495
- hxxps://freiqou5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ksajfesug[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86659-03495
- hxxps://neeuio17[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://checkalertsnow[.]pages[.]dev/Wi0n042HelpSaiErr0082/
- hxxps://6880f0fb41f44536839f89ed--mellow-torte-9c082e[.]netlify[.]app/oc[.]html
- hxxps://domain-4tl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v1v029[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://new-eyp[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://tronjkmals9id44s3[.]z13[.]web[.]core[.]windows[.]net/?ip=172[.]115[.]222[.]157&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Spectrum&org=Spectrum&connectionType=Cable%2FDSL&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=California&city=Inglewood&_event=6b7b1e6ca37cb6456e5a26b70fdfe4a4&click_id=1f28jglxmdes43ho&tid=7&subid=claries[.]com&ref=claries[.]com&3
- hxxps://vnthagaesinattugaenchinnuanavaq[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://yytutyyfggddd83[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://dfffmmdededddddcidddmm[.]z13[.]web[.]core[.]windows[.]net/
- hxxps://werqkj3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tweetiulk1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewriouty4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://werqkj3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi30-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://monkfish-app-42qja[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7511
- hxxps://voiutewre2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://wiequryd2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://store-cu9[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio19[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://ewwtgfh4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://trons8uiakfc5rs4[.]z13[.]web[.]core[.]windows[.]net/?ip=139[.]171[.]200[.]19&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=Windstream+Communications&org=Windstream+Communications&connectionType=Corporate&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=&city=&_event=068ec5b3f9cfe8fd1e149f3de1c4be4a&click_id=1f28jglemdgbxsku&tid=6&subid=carmaxs[.]com&ref=carmaxs[.]com&3
- hxxps://gweiulk4-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://bmnmangalinyeakkabfrxswngaltheerum[.]rest/Win08ShDMeEr0887x/index[.]html
- hxxps://pulseprofitness[.]fit/track/Wi060nh1delpShnt602/index[.]html
- hxxps://v32irouwl3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://hyperlinks-1zz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://essartinssahallahjaiko[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
- hxxps://frwqrueyhj3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vewroi20-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://television-7x6[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://starfish-app-e6qgy[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7512
- hxxps://weroiulkj4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://b4weoii4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tailwindcss-b1j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://v32irouwl1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v1v033-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://arwqiu4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vweroi4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://host-t2j[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://jscnmtbkmjew[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-844-8315
- hxxps://adfdfv23grdf[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://qwriruy3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://weriu20[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
- hxxps://vwriulk2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://vwriulk3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://geeuiop7[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://gweiulk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://agdfhj16gvh[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpAmPaErr010/index[.]html
- hxxps://v1v030[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://data-bhl[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://neeuio19-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://frwqrueyhj5[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio15[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://tronjkamd3ws2a8[.]z13[.]web[.]core[.]windows[.]net/?ip=172[.]58[.]150[.]190&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F138[.]0[.]0[.]0+Safari%2F537[.]36&isp=T-Mobile+USA&org=T-Mobile+USA&connectionType=Cellular&browser=Chrome+138[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States®ion=Tennessee&city=Nashville&_event=4b30c6b13cb8f807c436e93025f1a0d1&click_id=1f28jglemdgbxsku&tid=6&subid=carmaxs[.]com&ref=carmaxs[.]com&3
- hxxps://wiequryd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj5-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://v4iewur1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://neeuio9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://sql-7ti[.]pages[.]dev/Wi0n0erAry0mpAlert048/
- hxxps://vweiru5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://freiqou3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://yutruy[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
- hxxps://reiewukj1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
Phishing URL IOCs
You can see our feed of observed IOCs for the brand on following threat intelligence platforms.https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses
What is Phishing?
Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.
How to Handle It
If you have already accessed such phishing websites, take the following steps:
- If you entered any personal information, change all passwords and alert your bank and credit card companies.
- Enable multi factor authentication to prevent access from attacker.
- If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
- Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
- Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.
Why Phishing is Dangerous
Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.
Conclusion
Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.