2025-08-12 - Tech Support Scam - Phishing Capmapign Observation Alert

63 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 63 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://leeuio34-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiuol4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oqpowieur4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://erotirkl3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe2-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio37-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://6891e806657cea0716d49ea4--classy-muffin-243996[.]netlify[.]app/oc[.]html
  •  hxxps://retiuol[.]z31[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://noestromenrer[.]pages[.]dev/
  •  hxxps://ytoeite[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oqpowieur5[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio31[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://xsmdgsqv82032024[.]z22[.]web[.]core[.]windows[.]net/?gad_campaignid=22854233649&gad_source=5&gclid=EAIaIQobChMIzPCJzPv3jgMVQG_DBh1naRHuEAEYASAAEgJwcPD_BwE
  •  hxxps://retiouwe4-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://windoexp2[.]pages[.]dev/
  •  hxxps://oqpowieur4-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oeirute4[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cjklwer-sdkfje-skjdhf-esdf[.]netlify[.]app/
  •  hxxps://68822947cd259c287b905c9a--elegant-figolla-c3cc2a[.]netlify[.]app/oc[.]html
  •  hxxps://xvcfsdytfuididuid[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://doll4u[.]duckdns[.]org/
  •  hxxps://allvew4-secondary[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://1vpzbctd13sczp[.]azureedge[.]net/f0387/?clickid=d29p2k55sqmc73d15g60
  •  hxxps://oqpowieur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio36-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw5-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://axhshhdbipyyyy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://oqpowieur1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute3[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiuol3[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://werioo1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou4[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teiorut5-secondary[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://erotirkl1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoirt[.]z45[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-698-5490
  •  hxxps://yerotiuew-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dddddhhhhhdddddmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ewirou1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reotiwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rxfqrnlbe1va9w[.]azureedge[.]net/f0387/?clickid=d29odjd5sqmc73d15dbg
  •  hxxps://9zhwmm5die64gj[.]azureedge[.]net/f0387/?clickid=d29nabd5sqmc73d12jd0
  •  hxxps://aaadaaaaaaaaaaasssssss[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html
  •  hxxps://e72wz3s3ba8ssw[.]azureedge[.]net/f0387/?clickid=d29meel5sqmc73d0ts80
  •  hxxps://reotiwe1-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dhhhhbbbbdddddmmmin[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ytoeite2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://merabaillpay[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://dffffdddhhhhmmminnnnnn[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hxhmm997t63r89nnow[.]z13[.]web[.]core[.]windows[.]net/win/index[.]html?call=1(866)-491-2972
  •  hxxps://tioure2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoriet4[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://usodinrofkoaemvae[.]z13[.]web[.]core[.]windows[.]net/f0387/?clickid=d2aba7t5sqmc73d1o84g
  •  hxxps://rwoieru2[.]z11[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ytoeite5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw2-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://bememeshac[.]arguesting[.]my[.]id/win/index[.]php?vq=DhRFB+hKbVIygh7OUX/TIjNZcHhrMVRzRUkyeVo5MmVRZHRDOWk1WkRjZERidGhPdThHYmVTRDNXc1laejg1VG0rZTlRQkxCYVZzSDk2ZzkrRXdoSFFQdTVERGN1aFNJTElCRjlzT21HaVNUeWlVbGJpNzhDTStJdVo3RUFBQ3g0ZFN0eENCOGFJOWthdThURnhjOS9pcmRLek1aQVlTbUxubjJwdUVCaTNnenJvaXlkNVRBSDFkNnk4TDM1cFU1YmozVnlveXhFTStUMnZFcQ==
  •  hxxps://www[.]securethepcnow[.]shop/
  •  hxxps://ytoeite3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teiorut1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiuol09890[.]z31[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://bnjnkmkmy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://oqpowieur3[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw3-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://xmerabaillpay[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://reotiwe2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw1-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retuoio1-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://treioww2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut4[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou5[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew1[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://usodinrofkoaemvae-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2abnvl5sqmc73d1ohj0
  •  hxxps://retuoio1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://werioo2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-720-5619
  •  hxxps://utreeteombomeomkmav-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2aecbt5sqmc73d22ur0
  •  hxxps://retuoio4-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dfffddddddhhmmmmmbbbmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://teiorut2-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://trituwek-secondary[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://utreeteombomeomkmav[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2adual5sqmc73d22sr0
  •  hxxps://werioo-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yoiert-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://leeuio31-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe3[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiouwe[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw4[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://treioww3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut5[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://be7sccleyie2do[.]azureedge[.]net/f0387/?clickid=d29ms1t5sqmc73d10glg
  •  hxxps://forddddeccdddiinnnmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://retiouwe3-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe1-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio32-secondary[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute1[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://piankaziyo[.]store/
  •  hxxps://leeuio35[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cleanshieldblockwarns[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-844-499-2552
  •  hxxps://treioww4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://werioo5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://teoiwurw3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://udvsretatsueifpnas[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2ad6nt5sqmc73d1vakg
  •  hxxps://retuoio3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw5[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://wtiouwe[.]z1[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://uhcetrertdtsrtstrstrs[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2af8lt5sqmc73d235hg
  •  hxxps://yeoriet3[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://fhvsjhxfkbc[.]pages[.]dev/
  •  hxxps://oqpowieur2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio4[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://y344ko6ruu9sub[.]azureedge[.]net/f0387/?clickid=d29pgpl5sqmc73d15q1g
  •  hxxps://refrenccceeciddcodmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://erotirkl[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoriet2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://forrrwddddddommmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://werioo2[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw2-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://hdnjdbillpayy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://woodtouchdecor[.]site/werrx01USAHTML/index[.]html
  •  hxxps://llz1dw1x5smfsm[.]azureedge[.]net/f0387/?clickid=d29m7955sqmc73d0tbg0
  •  hxxps://flowerpoint[.]org/
  •  hxxp://flowerpoint[.]org/
  •  hxxps://triuwot[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffddddhhhhbbbmmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://triuwot-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retieur3[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://dffforwrdddddcoddmmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://snake-bw5[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://didededdddefffffndddmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://oeirute-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut2[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://udvsretatsueifpnas-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2adgll5sqmc73d21950
  •  hxxps://teoiwurw5[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://noestropenno[.]pages[.]dev/
  •  hxxps://oqpowieur2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoriet[.]z45[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe5-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oeirute2-secondary[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute3-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe1[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://rwoieru[.]z45[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oqpowieur-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://o71kkdn73jnuv8[.]azureedge[.]net/f0387/?clickid=d29ore55sqmc73d15fpg
  •  hxxps://dkjdlgkjkl-lionsh-app-xypkf[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://yoiert3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio37[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio2-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw1-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw4-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://heddcx4[.]z10[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://yeoirt4[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://allvew2[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://lrmmopk29q85u3[.]azureedge[.]net/f0387/?clickid=d29mlct5sqmc73d0v4ug
  •  hxxps://retuoio[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yerotiuew5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://tioure3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://treioww5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://werioo3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio2[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bitroshotrac[.]arguesting[.]my[.]id/win/index[.]php?vq=5Pfp/utXBp0uJtG0NotA2nhEMzlrNndPM3BTdkFMMndueG1jRXRPV1o1OHQrTmIyeGdTOTQ0MDBQY1NHckRkSGREcTBvWUpYSEZSUFJ1SFYrSzdVNnZVZzhxaDV1NFdWUFN2S1lqeVBGREtkM0ptRG9kYTZLU2lwenhSZDNYaVM3VFFsTEpiM1VyQTBoaU9rSldRYVdKdGxxZWxjQWhGQ0EyL0ZodkJQdkYreFVzcldTUjdKQnY3RHJYb25Kb0NmN2JRdFZQYnl5Z0swZUxrLw==
  •  hxxps://heddcx1[.]z30[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://gcjkdjskdjkdjksd-aj7te[.]ondigitalocean[.]app/Wi010nh1delpS0mAm032/index[.]html
  •  hxxps://dnsjfvhdsv[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87759-34534
  •  hxxps://trituwek2[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retoiuw5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://jjklklkhhhsd4kghkdl55gs[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-855-698-2251
  •  hxxps://rwoieru5[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://zsmeravapdpyy[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-803-762-4145&_event=e66339adbcc0ece14459ad808ea57574
  •  hxxps://oeirute1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://reotiwe3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ytoeite5-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://eyx0pibh81947111[.]z22[.]web[.]core[.]windows[.]net/?gad_campaignid=22854233649&gad_source=5&gclid=EAIaIQobChMIhMjZjcD1jgM
  •  hxxps://eyx0pibh81947111[.]z22[.]web[.]core[.]windows[.]net/
  •  hxxps://ddddfffffccccddddddzzzzz[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://trituwek2-secondary[.]z22[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retoiuw2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou5-secondary[.]z20[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://werioo3-secondary[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ewirou3-secondary[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://maprichuglapr[.]techniquests[.]my[.]id/win/index[.]php?vq=Ny5HnvhDb93Gg6RoHn6yzmdOQWFwTFduNnU5eHJWQStWK3B2VGJ5TThaTFBnS2tDUyt6b0s2KytwaWpncjVNRG11eTZhTEJLWlVJWnI2clZtalNOQVhsOHF3VUJFM2dhWFFJdnNYZ3BielYwTC9pUnlOMVpLdWNYbWVJZ2J6Q2RlSlNRL0x3NzhxbkVDLzZNcEgzY09wam5hR1ZxZDF6Y1ZFMk9MSmdNRFZMUngvRVQ1Z1dhc0hSejhRV2FralpVRGlkRDYyZUtjOHA2UkY4dA==
  •  hxxps://therwwd-teratghtdt-btaeittrearjecdhetalitnoudnttr-nrea-eachhee[.]lon1[.]cdn[.]digitaloceanspaces[.]com/lop/index[.]html
  •  hxxps://treioww[.]z45[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://vxjxguisikjhcduiggudigduc[.]pages[.]dev/WinErrAmninf040/
  •  hxxps://ytoeite-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oqpowieur5-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://criteria[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://ddddfffffddddhhhhbbbbbmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yoiert1[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://sdkfkdkdl[.]z13[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-87759-34534
  •  hxxps://upyatervvuvcvuutfuf[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2affel5sqmc73d236d0
  •  hxxps://reotiwe-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio34[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio32[.]z30[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut3-secondary[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retiuol09[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw2[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoriet1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://aojhgmwrzplipoip[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://aojhgmwrzplipoip[.]z31[.]web[.]core[.]windows[.]net/favicon[.]ico
  •  hxxps://tronhjnaby7s6d4e[.]z13[.]web[.]core[.]windows[.]net/?ip=47[.]184[.]250[.]247&useragent=Mozilla%2F5[.]0+%28Windows+NT+10[.]0%3B+Win64%3B+x64%29+AppleWebKit%2F537[.]36+%28KHTML%2C+like+Gecko%29+Chrome%2F139[.]0[.]0[.]0+Safari%2F537[.]36&isp=Frontier+Communications&org=Frontier+Communications&connectionType=Cable%2FDSL&browser=Chrome+139[.]0[.]0&os=Windows+10&referer=&countryCode=US&country=United+States&region=Texas&city=Southlake&_event=67ba5169bc0f3d70a5c7e380dcb029f3&click_id=1f286nqame33816k&tid=6&subid=apps4mac[.]com&ref=apps4mac[.]com&3
  •  hxxps://retiouwe2[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rwoieru1[.]z12[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute2[.]z29[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ebgzzfnrhasbah[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://trituwek3-secondary[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://yeoirt2[.]z15[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://8yu8kbdy1cr27b[.]azureedge[.]net/f0387/?clickid=d29o62l5sqmc73d15bbg
  •  hxxps://tioure5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retuoio5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure4[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retoiuw4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://d6c600jaaa864a189e6157[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://viruswarning0807userjcmt[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://pixcv13[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou4-secondary[.]z32[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yeoriet5[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://5435647345647567[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://tioure1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://oeirute5-secondary[.]z5[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://gyzgwyzbwzp[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://retieur1[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://pixcv13-secondary[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yoiert1-secondary[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://dffffddddddhhhhbbbbmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yerotiuew5-secondary[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut4-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ewirou3[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://oqpowieur1-secondary[.]z8[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://3435645734563[.]z33[.]web[.]core[.]windows[.]net/Wi01nhelpSpefi1042/index[.]html
  •  hxxps://leeuio33-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://rwoieru3[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://retuoio5[.]z14[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://yoiert3-secondary[.]z13[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://erotirkl-secondary[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://ytoeite4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://bushalomosibu[.]gradestructed[.]my[.]id/win/index[.]php?vq=EwfTIyPxJQ03hz9leH0xGnE4Yk0wQ3RHM2wrb2x1dXRqQmhpS0NzQ1JGS2NuMDdIRCtMMitJeHhTSXNUalBtSWlad1VaS25QbHBxelRsbjZMODJ5QXJWOHpjd3FBeU5XQk1QRU9qSzg4TUUzVWUvbDJMRktzQWhhd1pVVWxOdE4yRW9paWxTSVJ1RFZXa01vNXkzQjE4Mi9WUFJQbFBBQWNzaE1QLzNrOEUzNlVvdWJxS1VreHdqaWgrMU1TTTUxcFhvaVRqd1pWTU41L3JuSg==
  •  hxxps://n2kkou27biwyub[.]azureedge[.]net/f0387/?clickid=d29no3d5sqmc73d14c70
  •  hxxps://rwoieru4[.]z19[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retieur2[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://cor670e1hrdpr0[.]azureedge[.]net/f0387/?clickid=d29okf55sqmc73d15fa0
  •  hxxps://www[.]mac[.]securethepcnow[.]shop/
  •  hxxps://yeoirt3[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://reotiwe2-secondary[.]z22[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://ddddfffffdddddbbbbmmmdd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://teoiwurw[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio35-secondary[.]z10[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw1[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teiorut[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://trituwek3[.]z4[.]web[.]core[.]windows[.]net/webC0deinfojphtml/?bcda=(0101)-88846-07612
  •  hxxps://retiouwe5[.]z26[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://0140me02[.]pages[.]dev/
  •  hxxps://retiuol1[.]z7[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://v97v9yqvognmd1[.]azureedge[.]net/f0387/?clickid=d29n34t5sqmc73d11hi0
  •  hxxps://48uda6wg1oih04[.]azureedge[.]net/f0387/?clickid=d29p98t5sqmc73d15gd0
  •  hxxps://treioww1[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retiouwe4[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://uhcetrertdtsrtstrstrs-secondary[.]z13[.]web[.]core[.]windows[.]net/f0041/index[.]html?clickid=d2afdel5sqmc73d2363g
  •  hxxps://sehdnjdbillpayy[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-803-762-4095
  •  hxxps://wjn6hyippg5ixs[.]azureedge[.]net/f0387/?clickid=d29m0955sqmc73d0tam0
  •  hxxps://nebochoproglu[.]barething[.]my[.]id/win/index[.]php?vq=qbBdnQTf/sgaGKuQ9h9AvEdrSGM0VGVCYmdwZUdIU2g4N042UEw0SW1nejJZZG9hV3NKSjczNENwZjhybU45ajN1OHd2bUhBRXRsR21TazhrdTgyTWhKdm1IMitWL090L0lZQ0xhVkdwL2p4N29hZGVJalBDM2Z2RnBZc1Y2ZXZ4NlJiMS94N3RjenFpZGZqcHdTVGs0QU1tYm9MNHF5ck5aa053cWJ2c1l2MHRDb3ZJTmZMZ2RUMk5QOHcxbG11VndScThHRE5LSXZkYm5XVA==
  •  hxxps://ytoeite4-secondary[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://retoiuw4[.]z27[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-888-844-8315
  •  hxxps://tioure4-secondary[.]z21[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://nfgjern[.]pages[.]dev/
  •  hxxps://yeoirt5[.]z1[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://yerotiuew3[.]z4[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://leeuio36[.]z35[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501
  •  hxxps://teoiwurw3[.]z24[.]web[.]core[.]windows[.]net/wewebinfocodeinfo01Html/?bcda=1-844-697-6501

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.