2025-08-08 - Tech Support Scam - Phishing Capmapign Observation Alert

93 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 93 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://ueoirutrw3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiue5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iyuyd4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoite3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoite4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ueoirutrw5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iyuyd5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotl2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://oeirute4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oqpowieur4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://erotirkl3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw7-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe2-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://gtrdbzk064hx9x[.]azureedge[.]net/f0387/?clickid=d2959p55sqmc73d0m480
  •  hxxps://kjkjkjghgf45-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://6891e806657cea0716d49ea4--classy-muffin-243996[.]netlify[.]app/oc[.]html
  •  hxxps://deeruiop4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/index[.]html
  •  hxxps://eropitrluio50[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://triulrew5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://5015kicecnrbsvbgsuitaixx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ytoeite[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oqpowieur5[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://mpn6kq9eaqp0px[.]azureedge[.]net/f0387/?clickid=d295ng55sqmc73d0p68g/
  •  hxxps://mpn6kq9eaqp0px[.]azureedge[.]net/f0387/?clickid=d295ng55sqmc73d0p68g
  •  hxxps://xrahanabillll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://xsmdgsqv82032024[.]z22[.]web[.]core[.]windows[.]net/?gad_campaignid=22854233649&gad_source=5&gclid=EAIaIQobChMIzPCJzPv3jgMVQG_DBh1naRHuEAEYASAAEgJwcPD_BwE
  •  hxxps://oieyuew1[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwtiowe2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eropitrluio5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://eropitrluio5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://deeruiop4-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-593-3671
  •  hxxps://oqpowieur4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://shovidin[.]wintertained[.]my[.]id/win/index[.]php?vq=plQzMmKMSWXDgT8oZKWWTHIwQlZhdEtoK3JUcVNZeE5zdjNuUHJ6T2J0a1U3M3BBRUxIQWpkUGJwc0RBaTlKT1JQNjhaN2RaeW5RZkdCVU5HWGIxZmE3Zlc4eklvT096b253Qm50ZFpacnRCMkVQQmJOVk9uTU5BUmoyUVpQM3BlMjZ6SHdlSkI4SzlSV3pMVENGT2hNdHlMejlmakp2Y1BxSXNNa2JXdGJvNThwbWo1S1RMSndZU29IajRsQzR0MWlSRGdMczVUcTdsWHc4UQ==
  •  hxxps://u7c1qw85oxfnf5[.]azureedge[.]net/f0387/?clickid=d290su55sqmc73d09pt0
  •  hxxps://qtykthivtarrmerriatanrmilahantaanishvxz[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://eropitrluio2-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://erotirkl3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vjbiudbsiudhidstrys[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-866-491-0995
  •  hxxps://reoite3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://ddfffdddhhhfffdommmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewirou2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oeirute4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fbtavrkhcuqqpypl[.]z1[.]web[.]core[.]windows[.]net/?fbclid=IwY2xjawL-yltleHRuA2FlbQEwAGFkaWQBqyP4RnNosQEe7tGRKoA_cENQ_05ZcCEpdZkdeaVxhVZ7cgjwh4WDv1Fcad_0G3NZy4QgDS0_aem_4S8quz1LuhndRmTh5T2wFg&utm_campaign=120228913386300241&utm_content=120229364277380241&utm_id=120228913386300241&utm_medium=paid&utm_source=fb&utm_term=120228913386320241
  •  hxxps://qaqa11-secondary[.]z19[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-86666-47240
  •  hxxps://iyuyd[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ppu1x8rnmii53m[.]azureedge[.]net/f0387/?clickid=d29270l5sqmc73d0a0kg
  •  hxxps://xvcfsdytfuididuid[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://baabilllyye[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://pft61yphzff4zk[.]azureedge[.]net/f0387/?clickid=d295uod5sqmc73d0ql6g
  •  hxxps://eropitrluio[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://allvew4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://1vpzbctd13sczp[.]azureedge[.]net/f0387/?clickid=d29p2k55sqmc73d15g60
  •  hxxps://oqpowieur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oieyuew5-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eropitrluio3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://rwtiowe3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ueoirutrw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://erotirkl2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://iyuyd1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eropitrluio-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://axhshhdbipyyyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://oqpowieur1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ueoirutrw4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oeirute3[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffddddimmmdddcddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ytoeite3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eropitrluio1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiue5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew3-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teiorut5-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://mxzqwrtgducatnhionegaldvicehnnenklghdb[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://rwtiowe5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://erotirkl1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dddddhhhhhdddddmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://triulrew6[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewqruwy[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reotiwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoite-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rxfqrnlbe1va9w[.]azureedge[.]net/f0387/?clickid=d29odjd5sqmc73d15dbg
  •  hxxps://9zhwmm5die64gj[.]azureedge[.]net/f0387/?clickid=d29nabd5sqmc73d12jd0
  •  hxxps://oieyuew2-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://aaadaaaaaaaaaaasssssss[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html
  •  hxxps://e72wz3s3ba8ssw[.]azureedge[.]net/f0387/?clickid=d29meel5sqmc73d0ts80
  •  hxxps://reotiwe1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dhhhhbbbbdddddmmmin[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ytoeite2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://aoaxnn8l8ojc[.]azureedge[.]net/f0387/?clickid=d28eldl5sqmc73cvpfa0
  •  hxxps://mut92uwsaub99b[.]azureedge[.]net/f0387/?clickid=d2914655sqmc73d09q2g
  •  hxxps://reoite1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://merabaillpay[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://lrlv82jswzos[.]azureedge[.]net/f0387/?clickid=d28dp2l5sqmc73cvf110
  •  hxxps://reoiutw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://triulrew4-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://usodinrofkoaemvae[.]z13[.]web[.]core[.]windows[.]net/f0387/?clickid=d2aba7t5sqmc73d1o84g
  •  hxxps://jwyi912i316h24[.]azureedge[.]net/f0387/?clickid=d290m655sqmc73d09obg
  •  hxxps://hszxumomangerierittenborikichinounx[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://yerotl2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://ewirou1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ytoeite5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw2-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dffffddddfhhhbbmmmd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://protectcleanthreaton[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/
  •  hxxps://dfdddfffforrrmmmcoddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bememeshac[.]arguesting[.]my[.]id/win/index[.]php?vq=DhRFB+hKbVIygh7OUX/TIjNZcHhrMVRzRUkyeVo5MmVRZHRDOWk1WkRjZERidGhPdThHYmVTRDNXc1laejg1VG0rZTlRQkxCYVZzSDk2ZzkrRXdoSFFQdTVERGN1aFNJTElCRjlzT21HaVNUeWlVbGJpNzhDTStJdVo3RUFBQ3g0ZFN0eENCOGFJOWthdThURnhjOS9pcmRLek1aQVlTbUxubjJwdUVCaTNnenJvaXlkNVRBSDFkNnk4TDM1cFU1YmozVnlveXhFTStUMnZFcQ==
  •  hxxps://retoiue3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwtiowe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewqruwy2[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hgfragstgjfhgkg[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://retoiue1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ytoeite3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://urchin-app-44fn9[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(0101)-85569-82354
  •  hxxps://teiorut1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://0966me[.]pages[.]dev/
  •  hxxps://reoite5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://retieur5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://bnjnkmkmy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://rzxcfomaihangannitanuyseinruntsenx[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://oqpowieur3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotl4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://retoiuw3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wncorpovereigtlabvnchipelagludenfcsrtwn[.]rest/Win08ShDMeEr0887x/index[.]html
  •  hxxps://xmerabaillpay[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://reotiwe2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw1-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retuoio1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dffffdddddhhhhbbbbmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yerotl4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://usodinrofkoaemvae-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2abnvl5sqmc73d1ohj0
  •  hxxps://hklm197sjk9ssow[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-770-4374
  •  hxxps://retuoio1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://triulrew1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-720-5619
  •  hxxps://utreeteombomeomkmav-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2aecbt5sqmc73d22ur0
  •  hxxps://retuoio4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew2[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oieyuew1-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ueoirutrw5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://werioo[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oxdl5f6xcd2a[.]azureedge[.]net/f0387/?clickid=d28esml5sqmc73cvqn7g
  •  hxxps://teiorut2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotl5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://trituwek-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://utreeteombomeomkmav[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2adual5sqmc73d22sr0
  •  hxxps://werioo-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rahanabillll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://kjkjkjghgf46[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://triulrew6-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ueoirutrw1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjkjkjghgf46-secondary[.]z21[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://teoiwurw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur7-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiue[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe3[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotl5[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://yuiuiyg42-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retiouwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotl1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoiutw1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiue2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://plkb150o7xv93l[.]azureedge[.]net/f0387/?clickid=d2920fl5sqmc73d09vhg
  •  hxxps://teiorut5[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://triulrew4[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewqruwy3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur6[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://spywarepatchcleanon[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-491-0182
  •  hxxps://be7sccleyie2do[.]azureedge[.]net/f0387/?clickid=d29ms1t5sqmc73d10glg
  •  hxxps://chochutredapr[.]wintertained[.]my[.]id/win/index[.]php?vq=OcFMMUqatajq2s7yTNefOi91cmtUbjRtNUM5MWkrM1VFcTFCYTl3S3A3aThjbzVLQmJGMU1HdkFiTWhVaXkwbVJIelZIeTlMU3pvVUEvaVN4SFpQaFBYTnBvYlF1T0R4QlEvVEVOdzhUa3pqdWxSa1hlUGJCUE03K1NiakppbUN6d1pjc1NObHRra3AyZDFWdEcrSlB3aDV0N2VmTFMxOW1rSWJFKzZ6ekgrY3ZpTGNyUXJwd0N3bHVkT0JUTnl1Ni9VeFhwTWlRYlhCTW5DLw==
  •  hxxps://retiouwe3-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ldoinogzmm2jj[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://yerotiuew4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://triulrew3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oeirute1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ueoirutrw4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kjkjkjghgf41-secondary[.]z24[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://reoiutw8[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://udvsretatsueifpnas[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2ad6nt5sqmc73d1vakg
  •  hxxps://retuoio3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw6[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiouwe[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://reoite[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uhcetrertdtsrtstrstrs[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2af8lt5sqmc73d235hg
  •  hxxps://kjkjkjghgf43-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://sxvkapribilll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://oqpowieur2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://iyuyd2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://5020pbcnbrvddemzxykukicg[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://win-notification-alerts[.]pages[.]dev/
  •  hxxps://ytoeite2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://y344ko6ruu9sub[.]azureedge[.]net/f0387/?clickid=d29pgpl5sqmc73d15q1g
  •  hxxps://refrenccceeciddcodmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://erotirkl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://forrrwddddddommmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://werioo2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hdnjdbillpayy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://ewqruwy-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://woodtouchdecor[.]site/werrx01USAHTML/index[.]html
  •  hxxps://reoiutw2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://llz1dw1x5smfsm[.]azureedge[.]net/f0387/?clickid=d29m7955sqmc73d0tbg0
  •  hxxps://ueoirutrw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://triuwot[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffddddhhhhbbbmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://bxgvdshgdsgkdsj[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://yerotl3-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://5s33nuv2w61d[.]azureedge[.]net/f0387/?clickid=d28db7d5sqmc73cvar10
  •  hxxps://triuwot-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew3[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoite2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://didededdddefffffndddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://iyuyd-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://udvsretatsueifpnas-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2adgll5sqmc73d21950
  •  hxxps://teoiwurw5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://gw9oeitur5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiue7[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iyuyd1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eroiutlk4[.]z14[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://oqpowieur2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoiutw1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwtiowe2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://5pag1lr85onr[.]azureedge[.]net/f0387/?clickid=d28ct155sqmc73cv7u10
  •  hxxps://oeirute2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute3-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yc7bp5kdep8y4c[.]azureedge[.]net/f0387/?clickid=d290iat5sqmc73d09o8g
  •  hxxps://retiouwe1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://seahorse-app-7elpw[.]ondigitalocean[.]app/webC0deinfojphtml/?bcda=(0101)-85569-82354
  •  hxxps://oqpowieur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://o71kkdn73jnuv8[.]azureedge[.]net/f0387/?clickid=d29ore55sqmc73d15fpg
  •  hxxps://reoite5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://gw9oeitur8[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gn9g0eoy13996g[.]azureedge[.]net/f0387/?clickid=d295gh55sqmc73d0ngvg
  •  hxxps://baabilllyyd[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://tioure3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dddfrippfropppgroppdmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retuoio2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ueoirutrw1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://q2yles56005k[.]azureedge[.]net/f0387/?clickid=d28e05t5sqmc73cvhn20
  •  hxxps://retoiuw1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rgkfdgf63[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://teoiwurw4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://besbillpy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://retuoio3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://heddcx4[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://allvew2[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://reoite2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://lrmmopk29q85u3[.]azureedge[.]net/f0387/?clickid=d29mlct5sqmc73d0v4ug
  •  hxxps://retuoio[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bitroshotrac[.]arguesting[.]my[.]id/win/index[.]php?vq=5Pfp/utXBp0uJtG0NotA2nhEMzlrNndPM3BTdkFMMndueG1jRXRPV1o1OHQrTmIyeGdTOTQ0MDBQY1NHckRkSGREcTBvWUpYSEZSUFJ1SFYrSzdVNnZVZzhxaDV1NFdWUFN2S1lqeVBGREtkM0ptRG9kYTZLU2lwenhSZDNYaVM3VFFsTEpiM1VyQTBoaU9rSldRYVdKdGxxZWxjQWhGQ0EyL0ZodkJQdkYreFVzcldTUjdKQnY3RHJYb25Kb0NmN2JRdFZQYnl5Z0swZUxrLw==
  •  hxxps://heddcx1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://dnsjfvhdsv[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87759-34534
  •  hxxps://trituwek2[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retoiuw5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://baabilllyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://5hc43gay3fzrl3[.]azureedge[.]net/f0387/?clickid=d291ikl5sqmc73d09qi0
  •  hxxps://uspergoaokeokba-secondary[.]z13[.]web[.]core[.]windows[.]net/f0387/?clickid=d28cmdd5sqmc73cv6no0
  •  hxxps://zsmeravapdpyy[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-803-762-4145&_event=e66339adbcc0ece14459ad808ea57574
  •  hxxps://oeirute1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ueoirutrw2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reotiwe3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rwtiowe1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewqruwy3-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eropitrluio50-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://ytoeite5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoite4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eyx0pibh81947111[.]z22[.]web[.]core[.]windows[.]net/?gad_campaignid=22854233649&gad_source=5&gclid=EAIaIQobChMIhMjZjcD1jgM
  •  hxxps://eyx0pibh81947111[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://yerotl3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://difffdddefffenndddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://triulrew2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ddddfffffccccddddddzzzzz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://trituwek2-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://owoiryu[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiue7-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://vxjxguisikjhcduiggudigduc[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://ytoeite-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jeevcx2[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://oqpowieur5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://iyuyd3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwtiowe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://owoiryu-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://sdkfkdkdl[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87759-34534
  •  hxxps://gw9oeitur3-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://75lh6ofvs2skb8[.]azureedge[.]net/f0387/?clickid=d292eel5sqmc73d0a1i0
  •  hxxps://triulrew5[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://upyatervvuvcvuutfuf[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2affel5sqmc73d236d0
  •  hxxps://reotiwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoiutw6-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teiorut3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw2[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://688cb37c336ce242f9243a71--bespoke-sfogliatella-0428e3[.]netlify[.]app/oc[.]html
  •  hxxps://uspergoaokeokba[.]z13[.]web[.]core[.]windows[.]net/f0387/?clickid=d28c9gt5sqmc73cv5lp0
  •  hxxps://retoiue3[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://aojhgmwrzplipoip[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://aojhgmwrzplipoip[.]z31[.]web[.]core[.]windows[.]net/favicon[.]ico
  •  hxxps://ueoirutrw3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe2[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rwtiowe1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://xyodzj7698zc[.]azureedge[.]net/f0387/?clickid=d28di8t5sqmc73cvd18g
  •  hxxps://triulrew1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://eropitrluio5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://oieyuew5[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rwtiowe3-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reoiutw7[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiue1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ebgzzfnrhasbah[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://trituwek3-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://4izgv68vbx8n6c[.]azureedge[.]net/f0387/?clickid=d291out5sqmc73d09reg
  •  hxxps://8yu8kbdy1cr27b[.]azureedge[.]net/f0387/?clickid=d29o62l5sqmc73d15bbg
  •  hxxps://tioure5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dffffddddhhhhbbbmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retuoio5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://d6c600jaaa864a189e6157[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0807userjcmt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://gqe181n6nd65ww[.]azureedge[.]net/f0387/?clickid=d292sjl5sqmc73d0ak10
  •  hxxps://pixcv13[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reoiutw8-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rain-3f4[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://yerotl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rtiuow4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-593-4447
  •  hxxps://5435647345647567[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://tioure1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gyzgwyzbwzp[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://retieur1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hklm42nk7kk9ssow[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-833-770-4374
  •  hxxps://yerotl1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://pixcv13-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://451k0n4hqysljk[.]azureedge[.]net/f0387/?clickid=d292l955sqmc73d0a2gg
  •  hxxps://yerotiuew5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eropitrluio2[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://fsyfbyw4a890[.]azureedge[.]net/f0387/?clickid=d28f38l5sqmc73cvrpkg
  •  hxxps://dhhhhddddhhhhmmmmmmzz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://rwtiowe5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou3[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oqpowieur1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://3435645734563[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://ewqruwy1[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jeevcx1-secondary[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retoiue4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retuoio5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://triulrew2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dm4t9pc1042i11[.]azureedge[.]net/f0387/?clickid=d2933et5sqmc73d0c6ug
  •  hxxps://rwtiowe4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gw9oeitur8-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://n2kkou27biwyub[.]azureedge[.]net/f0387/?clickid=d29no3d5sqmc73d14c70
  •  hxxps://xnj9843qzac9gk[.]azureedge[.]net/f0416/?clickid=d2957455sqmc73d0lju0
  •  hxxps://kapribilll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://v7nvoamvgp7h[.]azureedge[.]net/f0387/?clickid=d28eead5sqmc73cvo670
  •  hxxps://eropitrluio3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://retieur2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cxkapribilll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://3pcj45idc80y[.]azureedge[.]net/f0387/?clickid=d28d3vt5sqmc73cv8lg0/
  •  hxxps://iyuyd4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oieyuew-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://cor670e1hrdpr0[.]azureedge[.]net/f0387/?clickid=d29okf55sqmc73d15fa0
  •  hxxps://gw9oeitur6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewqruwy2-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://googhghsaj1[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://reotiwe2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://nee[.]dultr[.]in/popup/me/
  •  hxxps://gw9oeitur3[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tronjkmah8ud4es3[.]z13[.]web[.]core[.]windows[.]net/?ip=104[.]13[.]105[.]83&useragent=Mozilla%2F5[.]0%2B%28Windows%2BNT%2B10[.]0%3B%2BWin64%3B%2Bx64%29%2BAppleWebKit%2F537[.]36%2B%28KHTML%2C%2Blike%2BGecko%29%2BChrome%2F138[.]0[.]0[.]0%2BSafari%2F537[.]36&isp=AT%26T%2BInternet&org=AT%26T%2BInternet&connectionType=Cable%2FDSL&browser=Chrome%2B138[.]0[.]0&os=Windows%2B10&referer&countryCode=US&country=United%2BStates&region=Ohio&city=Dayton&_event=2b5555e32959dfd2b0d58d8a5549683a&click_id=1f286nr1mdypywe9&tid=6&subid=diaryqueen[.]com&ref=diaryqueen[.]com&3%5B[.]%5Dnet
  •  hxxps://gw9oeitur1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://woo3b1pamzg7tu[.]azureedge[.]net/f0387/?clickid=d291bb55sqmc73d09qa0
  •  hxxps://teoiwurw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://gw9oeitur1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiue6-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xdrahanabillll[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://trituwek3[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://rwtiowe4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://0140me02[.]pages[.]dev/
  •  hxxps://ewqruwy1-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://kumarpayybill[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://v97v9yqvognmd1[.]azureedge[.]net/f0387/?clickid=d29n34t5sqmc73d11hi0
  •  hxxps://48uda6wg1oih04[.]azureedge[.]net/f0387/?clickid=d29p98t5sqmc73d15gd0
  •  hxxps://iyuyd2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dddffffddddrodommcodd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retiouwe4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uhcetrertdtsrtstrstrs-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2afdel5sqmc73d2363g
  •  hxxps://sehdnjdbillpayy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://wjn6hyippg5ixs[.]azureedge[.]net/f0387/?clickid=d29m0955sqmc73d0tam0
  •  hxxps://deeruiop1-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/index[.]html
  •  hxxps://ytoeite4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://adpie1slfsf3[.]azureedge[.]net/f0387/?clickid=d28fait5sqmc73cvsugg
  •  hxxps://tioure4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eropitrluio1-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-877-654-8260
  •  hxxps://nfgjern[.]pages[.]dev/
  •  hxxps://yerotiuew3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eroiutlk-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://besbillpye[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://teoiwurw3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiue4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.