2025-07-31 - Tech Support Scam - Phishing Capmapign Observation Alert

101 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 101 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://ewtlkj9[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi10-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi2[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://energy-7as[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://qdjkejksjrkejskds-u95gx[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://cdxi7-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vt40063c8g1i6hw[.]azureedge[.]net/f0349/?clickid=d21u9bt5sqmc73d3i31g
  •  hxxps://oietwef1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb5[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb7-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi19[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl6[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jeesdiuo4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://fsalkjrw5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://micro2-hbb8hgaxg8bje7fr[.]canadacentral-01[.]azurewebsites[.]net/index1[.]html
  •  hxxps://assets-90o[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://retlkwe1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mlaypyyye[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://cdxi31-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://easy-f23[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://oietwef-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi20[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retewiu4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi9[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://6876763b3ab803319d516720--spiffy-stardust-32b273[.]netlify[.]app/oc[.]html
  •  hxxps://ewtriwlk3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi26-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mlaypyyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://ewtgwreiu4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nso0tar7112mnr6[.]azureedge[.]net/f0349/?clickid=d21q6ad5sqmc73d2ujog
  •  hxxps://server-6bg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://web77d8crqc03vdk0z[.]z13[.]web[.]core[.]windows[.]net/WUIRJHDJDSKDJ/index[.]html
  •  hxxps://sdftei1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtriwlk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi30-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddddrefreshhhhhhsmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://dailydeal[.]today/Wi060nh1delpShnt602/index[.]html
  •  hxxps://ertlrkm2-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi29[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl2-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wejnfuewfg[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7517
  •  hxxps://sdxccvb10-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retwerq1-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://wgetgfskj-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7531
  •  hxxps://ccjkekdjkdjsd-mpif4[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://mainuutadmin07[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://retewiu4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi34[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://naho009[.]github[.]io/pop/
  •  hxxps://sdxccvb8-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retlkwe5[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://baagcrps[.]xyz/
  •  hxxps://uiowfd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi23-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sxothevbationaroaasteashenglvqzmlg[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://upervikolpjtrs-secondary[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d23ojb55sqmc73d3pakg
  •  hxxps://cdxi21-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk9-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffdddddhhhhhmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://server-new[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dddireecrttfassstseervic[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://twiurwejk00[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xdjkejkjsdkejksdj-5ezxp[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://oietwef5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vdffvdgfhbilll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://wetriuw2[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj2[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://spywarealertprotects[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-877-957-0050
  •  hxxps://ewtgwreiu2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd3-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddddededddhmmmmcoddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://xaxa16-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://cdxi14-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi8-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://280725aaaaaaaauuuuuu0026-secondary[.]z26[.]web[.]core[.]windows[.]net/
  •  hxxps://earth-c5v[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://retiuwe4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://goodjgkjsrar2[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://ertriuewa3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi11[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk2-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hash-kdz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rtwior1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi23[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi25-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://bg77s23r3now[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-866-590-3867
  •  hxxps://twrukj3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi30[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://blubachaberubachaki[.]rosition[.]my[.]id/win/index[.]php?vq=OgvKTfYpW+SNWWVWA6yTw2RPT1lQQ0t2em9hMHlqNkFiN2lSU2NMS1gzN0svalNjYlFhaWYyTm43Wm9QbGhSRjdFb25YcGx5Ym1DM3BaaGhPZllZSE1PRHhOcEVuTjJIU3Z3aVFYZlBjZ0tFdkJ1dTA4YVdaNmV6ZWY5eS9pNGd1WUtEb3RaQ3FKeXJHTXYwMzhsaG1aM04zYW4xUEF2ejR2MEVXVnBmUUhJSEwrelA2NlFlKytYSlp4NzNIVjN0YzY3bzhpYkZreUNuSi9ubg==
  •  hxxps://twiurwejk2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi13-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://forwwardddefendercoddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ertlrkm1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi27[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm2[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk00-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://odjkejksjdksdjs-dio3s[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://retlkwe2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://goldfish-app-fq8sf[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=asd
  •  hxxps://pannnn5-secondary[.]z6[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://cdxi32-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hunnn5-secondary[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87768-43240
  •  hxxps://retiuwe3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd3o[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sead-54z[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://tweriuj5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retlkwe1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi2-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertriuewa1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://3003uyrboeugrlrnzdhbdamt[.]z13[.]web[.]core[.]windows[.]net/?&GLD=d253snof4svs7398f6kg&U=61d8ed407cbe44c67560de1c1&C=polystar&I=polystar[.]com[.]ph&P=&d=&E=&G=86[.]1[.]130[.]145&H=&J=
  •  hxxps://ertlrkm4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://h13ou7l528uehcq[.]azureedge[.]net/f0349/?clickid=d21rudt5sqmc73d3a7bg
  •  hxxps://rewriu5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://decccreasmmmndddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtlkj8[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ydnkeksdjkdejks-9kvix[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://uiowfd1-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb12[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://open-2wa[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cdxi32[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb10[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nafjaufguasdfgsa[.]pages[.]dev/
  •  hxxps://udvertohijiko[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d23p1n55sqmc73d3qt4g
  •  hxxps://trwrwioueq[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://6r1kf6alv4jsk7r[.]azureedge[.]net/f0349/?clickid=d21v5i55sqmc73d3i900
  •  hxxps://hunnn2-secondary[.]z8[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7531
  •  hxxps://retlkwe4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dilopralotrememugl[.]leavily[.]my[.]id/win/index[.]php?vq=LcaCn8tvpTsq0pJyv50/PjhiNzhvRnJUY2M4NDZrUDlDMTRtdEVwMGVJOHNTZHFOVm5aZ0Y3V1BRTDQ0K3pBbzlMTmphUjlkemJKcTc5S21ibFlkYitGaTBkZ3hJcFN1ajhBd0dtNS92YTM5QitKUkZZMTQ4K2F1Q1VHdWVkQkZrczBhT0VmR3A0ditqWWY3bGFSd2hmaCt5WHhreHZ5ZkxlaWNycWh3NXRVZHlhS0VzQnlOc000dFlKU3JudkxaL1l0d0RrT1VCQm8xZHkxYw==
  •  hxxps://3auv74lbdalr39z[.]azureedge[.]net/f0349/?clickid=d21psut5sqmc73d2sfd0
  •  hxxps://dedddudeddscannnmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewtriwlk4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://290725uuuuuuukkkkkkk0012-secondary[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://jeesdiuo6[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://ertriuewa-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://e752w2mv9vp79i0[.]azureedge[.]net/f0349/?clickid=d21s7kl5sqmc73d3c3f0
  •  hxxps://xaxa15[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://coral-app-salgk[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7515
  •  hxxps://twrukj3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wrvxlhctesoreatureshatakeometg[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://cdxi20-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtlkj8-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nnhu8nms62r9now[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(877)-830-3508
  •  hxxps://rtwior-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mibepririshoras[.]leavily[.]my[.]id/win/index[.]php?vq=SrXbuK0Y88MvC8aGxw6UjUJmVGRReTh5R2dHcndlY3JtY3cvaktwL1hQbjFqNTRSV3AyVm9XWUtYOXJadGFLd3pmWVpoSG1wUUIvNksydk8xY052VmNPVXp5dG9yc2ZKNDhZL2F1a1R5TitycDJ2UGdtaVA1YWN5dk1LUWJlUkc0RmR2WG14VTcvMEljWkJadzFkKzdnTjZaTE9pT0Zxeno2N3RyUXhpcmt4SG02bHlneTdEb3FMaTlqbXZ1UU5ja25IZEVxVVQxclVsa0tXOA==
  •  hxxps://cdxi10[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dolphin-app-2-77jqf[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(0101)-87795-71349
  •  hxxps://upervikolpjtrs[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d23o8ct5sqmc73d3p5j0
  •  hxxps://cho2-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://oietwef4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk8[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wdjjekejksdjsk-wolfe[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://v2jppjjiutt[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://300725uuuuuuukkkkkkk0030-secondary[.]z35[.]web[.]core[.]windows[.]net/
  •  hxxps://lkhjhdfghjk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-9294
  •  hxxps://ewtlkj[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb2-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi12-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd1[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi7[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ffffhhddddemmmannnnddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gbswmqrtzcvbdfghwktuwrqfvcmzcxv[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rewriu2[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu2-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vttt78j3r9now[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(866)-590-3074
  •  hxxps://stingray-app-2-yapjx[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7517
  •  hxxps://uiowfd4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://earth-esu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://retlkwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://7mlnrt4robjf9fc[.]azureedge[.]net/f0349/?clickid=d21vf7l5sqmc73d3i9gg
  •  hxxps://yytutyyfggddd85-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://rewriukj[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://shark-app-b6a85[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7517
  •  hxxps://qwrikjl3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://njkdjkjekdkdjskd-jj6mh[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://compatibility-9jh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://uvzgqog6y225wyi[.]azureedge[.]net/f0349/?clickid=d21vo2t5sqmc73d3i9pg
  •  hxxps://retiuwe5[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://akhhh1[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://ewtgwreiu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi35-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi24-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk2[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retewiu1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj3-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi35[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtriwlk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi16-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffddddbbbbmmmdddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retewiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://806ly8b0kojjoxx[.]azureedge[.]net/f0349/?clickid=d21r25d5sqmc73d34eo0
  •  hxxps://ertriuewa2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu3[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mongo-1tg[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://nmzzainmew9983zs[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-590-3860
  •  hxxps://retewiu3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu1-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://newalert-btahgzgcfja8b8ck[.]canadacentral-01[.]azurewebsites[.]net/index1[.]html
  •  hxxps://xaxa12[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://twrukj2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dddfffdddddhhbbbmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://get-cmc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kijihuggi5[.]z35[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://23c8t0tla7iatt0[.]azureedge[.]net/f0349/?clickid=d21uj355sqmc73d3i5rg
  •  hxxps://zip-e61[.]pages[.]dev/Ma0c0erAry0mpAlert048/
  •  hxxps://qwrikjl5-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://us-as0[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://kudotatrog[.]rosition[.]my[.]id/win/index[.]php?vq=sH4E7LPvbCJzzeNBjhD6IlVmcUVvd2Vyay9mWGRDWmdVSDdiU1IvbjMxYmRGdlVNUWlmeG1QWGkvZnVFdVNURkJ6QVRhTS9SRk91cmV0OTMyODY2NmdydW8wVTdZdXNab2s1RWQvS00yNzJMVkNHUGVFZm9MZXhsYis1YlRzWnhxUGNkWXE1SXJzMEtsaEZ6OFBwRVdzWDZ6bG5lSmFpa29GaVEyNi82NTZYYlRsZlNwWGlRdkFOUG1JL2FRdVpWSllrM3VOdm5mQ2t4Y21Scg==
  •  hxxps://pannnn3[.]z29[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://retewiu2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi22-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://54e7nbxypqi6slc[.]azureedge[.]net/f0349/?clickid=d21pgsl5sqmc73d2pqmg
  •  hxxps://sdlalkdkfk[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(050)-5050-9294
  •  hxxps://decockdivideemazzzdd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retewiu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdkjejkjdkejksd-i6znt[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://uiowfd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfffdddddhhhhhbbbbmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hvpkekjl5q5kp3m[.]azureedge[.]net/f0349/?clickid=d21sn6l5sqmc73d3eft0
  •  hxxps://uewerkj5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oietwef4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1khafq50hkbt75v[.]azureedge[.]net/f0349/?clickid=d21rlhl5sqmc73d37uvg
  •  hxxps://oietwef1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oietwef3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi33-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi8[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bauppayyyc[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://cdxi27-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://meesho-2m4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ertriuewa3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi12[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://didddciidddeddddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://match-csz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://retlkwe2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retewiu5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://akhhh7[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://tweriuj1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtriwlk-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiuwe5-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fsalkjrw5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://y8ns24750pg1s2k[.]azureedge[.]net/f0349/?clickid=d21u00l5sqmc73d3hekg
  •  hxxps://retewiu5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://special-3d8[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://jppjjiutt4[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://rewriu4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi28[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiuwe3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj4[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi6-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://finish-544[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zhuthainaikaiyilaarthaiuttuthuzws[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://cdxi36[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nqrnsescribetrabdcighppcitevxmendeoymvxz[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://4beh6k04ks2zc1c[.]azureedge[.]net/f0349/?clickid=d21rbgd5sqmc73d35upg
  •  hxxps://ewtriwlk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi18[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://lommoo00hhjew9983[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-590-3793
  •  hxxps://cdxi18-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://0pzo9r4hzi2viji[.]azureedge[.]net/f0349/?clickid=d21qghd5sqmc73d30uk0
  •  hxxps://vtwewoirw-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://u10r6f86g9bpykp[.]azureedge[.]net/f0349/?clickid=d21sh1t5sqmc73d3dg20
  •  hxxps://xaxa14[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://2028iwrpmyhcyrlvgwcfmdnu[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://sdftei1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi22[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retewiu1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddddfffdddddhhhbbmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yytutyyfggddd81[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://ewtriwlk[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://3032udvzkruzgyxrxkmhfkbs[.]z13[.]web[.]core[.]windows[.]net/?CLD=d2551od8i1rc73csr0j0&sou=0f60e40b9aa9d75cf75a7cfc8af4f178&cost=trprice%20troweprice&ip=Kentucky&city=Calhoun&C5=0[.]555&C6=22359&C7=RON&C8&C9
  •  hxxps://qwrikjl1-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bauppayyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://webjreqba6vbf7num3[.]z13[.]web[.]core[.]windows[.]net/WUIRJHDJDSKDJ/index[.]html
  •  hxxps://pdmekskldjlskd-etyt5[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://smooth-c1b[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rgh0angc4q86m4k[.]azureedge[.]net/f0349/?clickid=d21tms55sqmc73d3gq5g
  •  hxxps://retiuwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eumgmznkywmz[.]z21[.]web[.]core[.]windows[.]net/?ph0nq=1-888-278-7802
  •  hxxps://tweriuj-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi9-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi11-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl1[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi16[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://lookk999nnjj882r9now[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-590-3219
  •  hxxps://cdxi15[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sscx1[.]github[.]io/newibsuidgcihsduihcuishui1/
  •  hxxps://rtwior4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://awguxue04i2lq9i[.]azureedge[.]net/f0349/?clickid=d21sqg55sqmc73d3epvg
  •  hxxps://2kr4rpgetyvfeyv[.]azureedge[.]net/f0349/?clickid=d21qp155sqmc73d331d0
  •  hxxps://use-7ns[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://twiurwejk9[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertriuewa[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twepoi[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://deploy-dqe[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://dffffdddddhhhhbbbmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rum87cj04zof2u3[.]azureedge[.]net/f0349/?clickid=d21us4d5sqmc73d3i690
  •  hxxps://ertriuewa4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mission-a4r[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewtgwreiu5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi26[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertriuewa5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://nnhu88nmnnew345[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html
  •  hxxps://wetriuw4[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi13[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://badamtazabadam-fbeseahwhff7aycp[.]westcentralus-01[.]azurewebsites[.]net/test/
  •  hxxps://rtwior3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pannnn5[.]z6[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://weriu30-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://cdxi25[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-888-844-8315
  •  hxxps://udnkejksjdksdjd-tiqgt[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://etweiou2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfffhhhhbbbddddnnmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://akhhh9[.]z23[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://user-70n[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://timeline-533[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rewriu4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hunnn4[.]z15[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(03)-4570-7531
  •  hxxps://hunnn4[.]z15[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7531
  •  hxxps://sdxccvb3[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dj6qaays1yldf74[.]azureedge[.]net/f0349/?clickid=d21t4st5sqmc73d3ffu0
  •  hxxps://fsalkjrw[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://host-343[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://trwrwioueq1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertriuewa2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oietwef5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://javascript-2sv[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://b9tw7z6x9ln1hsp[.]azureedge[.]net/f0349/?clickid=d21pa4l5sqmc73d2omlg
  •  hxxps://wgetgfskj1-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7531
  •  hxxps://laketosasishiblo[.]leavily[.]my[.]id/win/index[.]php?vq=foJfXdsRGX70kQ7QRp2mG1d2bkhESjdqd2hVOTZqVUk1bEwyM1NweVJYUmV2M1d5Sy9oWXJBZmxUeFYxbmRRbVlVYloyeHVUbkpSVGVBRUUwdFlub08wVGZkcDNTRThtZU5CLzdqWEJFN0dabnRuNGxDVmYvd0x1dk1nREtGY1RxaUpROEhmdVFwUkNyZWJVaEdsZDU0bXZTbGQ1TUFwckJVTFJ1cUoraGpIaTlscE1rQXpPS24yVmZGSmp1Smp4ZzB4VE5SR2ZWZ2pva3lRbw==
  •  hxxps://trwrwioueq-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk7-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi21[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xyode2es80908186[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://retiuwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb7[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd3[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://address-015[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://twiurwejk6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtriwlk5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi3[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb5-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdftei-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sitaramsitaramsitaram[.]z1[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://uperviakoedkokafe[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d24d42d5sqmc73d4j630
  •  hxxps://ertriuewa5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://address-tga[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ewtriwlk5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriu1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi24[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://j6lgdi6jfqdnxie[.]azureedge[.]net/f0349/?clickid=d21td4l5sqmc73d3g39g
  •  hxxps://tsksji[.]com/
  •  hxxps://sdftei3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi17-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://utrertjijopk[.]z13[.]web[.]core[.]windows[.]net/f0349/?clickid=d23t2ml5sqmc73d4bmjg
  •  hxxps://retiuwe4-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hostname-35l[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://zdkjekjskdjkdj-pxd7u[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://rewriu3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hire-d2k[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://cdxi6[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtriwlk4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://mqtrangadhirattumehistlearakkatumeyzxwq[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://qwrikjl3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xaxa13[.]z5[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87783-03486
  •  hxxps://ewtriwlk1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fdddhhhhdddstttorrreemm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://tweriuj2-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi14[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hammerhead-app-zdi2p[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(03)-4570-7517
  •  hxxps://cdxi19-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdfdegfhbilll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-808-372-4927
  •  hxxps://divisionforceeeeequiytt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://cdxi5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb12-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb11-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cuotsmmi3njbi[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://dukeededudeedddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://wetriuw2-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi17[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj1-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xaxa11[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://gsaawj2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi15-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jeesdiuo7[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://twrukj4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yytutyyfggddd83[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://kdsbhj10khu[.]z19[.]web[.]core[.]windows[.]net/Wi0nHelpErr001/index[.]html
  •  hxxps://jppjjiutt4-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://cdxi31[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://etweiou4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdxccvb3-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oietwef3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://software-9uu[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://uewerkj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jeeiuop1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://retlkwe4[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oietwef[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xaxa16[.]z19[.]web[.]core[.]windows[.]net/MerxiC0deinfoJPhtml/?bcda=(03)-4570-7510
  •  hxxps://xaxa16[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://retiuwe2[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertlrkm4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://1006i1rxvrb3gqp5t8ua6vg0[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gsaawj5-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pleae[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://wgetgfskj3-secondary[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7531
  •  hxxps://oietwef2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vdjkekjsdkjsdksd-dlt54[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://retwerq1[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88866-46270
  •  hxxps://etweiou3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twiurwejk7[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bag-7xh[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://sdftei2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw5-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rckjjdksdjksdjks-cvkml[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://gsaawj5[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retlkwe5-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://qwrikjl6-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://twrukj4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://samncsjac[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7515
  •  hxxps://ewtriwlk1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retewiu2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi28-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ertriuewa4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bggy7nmmnew345[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-866-590-3891
  •  hxxps://retiuwe2-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj4-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtlkj-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw4-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uiowfd5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi3-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://weriu20[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(03)-4570-7510
  •  hxxps://gsaawj-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retlkwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uewerkj5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rdekljlwkejlekjelwke-6gtfv[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://qwrikjl5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtwior2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://king-prawn-app-5qhdl[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(050)-5050-9294
  •  hxxps://cdxi33[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wetriuw5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rewriukj-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tweriuj[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retwerq3[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-83368-19834
  •  hxxps://sdxccvb11[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cdxi1[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://lecuriyy126[.]z13[.]web[.]core[.]windows[.]net/winside/00Windbndktw0win11advance/index[.]html
  •  hxxps://rtwior1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gsaawj3[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewtgwreiu3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffhhhdddddhhhhmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://oietwef2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tretiwelk3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://0c245o8f4d974d6b94528[.]z13[.]web[.]core[.]windows[.]net/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.