2025-09-23 - Tech Support Scam - Phishing Capmapign Observation Alert

93 Phishing Websites for Tech Support Scam Detected in the Past 24 hours

This report has been created to alert potential mass phishing campaign which was recently conducted.
We have observed 93 possible phishing websites for the Tech Support Scam in the past 24 hours. This suggests that mass phishing campaign has potentialy been conducted recently. Analysts are need to keep eyes on phishing websites as listed below or similar.

Observed Phishing Website Example

Recent IOCs

  •  hxxps://nreit1[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreiut2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yeiwurw4-secondary[.]z19[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yweiur5[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://malwarealertshieldfix[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1-844-533-2429
  •  hxxps://fasssstddddddcoddddeddd[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://yweiur5-secondary[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://asddsx12fd[.]z13[.]web[.]core[.]windows[.]net/win[.]html
  •  hxxps://ureyoiu3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nryiure4[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hhweiu2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://codefrimmdedddscnmm[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://breiuto4[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://heiwurew1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreit[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yeiwurw5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ureyoiu3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu4-secondary[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://klljrlkjewlr-jellysh-app-9bsng[.]ondigitalocean[.]app/Wi044nh1delpRjK0044/index[.]html
  •  hxxps://sdxhpyyyy1[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/index[.]html?bcda=1-888-678-1497&_event=5b84b4aadb119e9fc7b2359616387089
  •  hxxps://neruo4[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreito2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit2-secondary[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nryiure3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yweiur3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreitue00-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ureyoiu1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreitue00[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nryiure-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://bewuirykj3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://primeblob05[.]z13[.]web[.]core[.]windows[.]net/Wi01nhelpShl1043/index[.]html
  •  hxxps://hreitue20[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yweiur2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nmkasimapyyy1q[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=null
  •  hxxps://urtoyt5[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://adfflskffkff[.]z13[.]web[.]core[.]windows[.]net/merrx01usahtml/?bcda=1800-976-328
  •  hxxps://lionfish-app-yzx5z[.]ondigitalocean[.]app/
  •  hxxps://hreiut1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://bewuirykj4-secondary[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://urtoyt5-secondary[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yeiwurw3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://urtoyt3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://connecttomymaincomp[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t05261/index[.]html
  •  hxxps://hreitue10-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://heiwurew4[.]z19[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew4-secondary[.]z19[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ookk99ew345[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-866-491-4754
  •  hxxps://dokder11-secondary[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://neruo5-secondary[.]z20[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit3[.]z32[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://kmnhcpyyy1bh[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-888-365-7089&_event=2ef40d5030f71727ece6ffb370708738
  •  hxxps://hreiut3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://ureyoiu2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito5[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yweiur[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://bewuirykj3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hhweiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hhweiu5[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreiut5-secondary[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://bewuirykj1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreit4-secondary[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreiut1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreiut3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://krvjnpedcofieus[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://yweiur4[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://bewuirykj5-secondary[.]z20[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://breiuto4-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://neruo1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://chetvertiieihwierhwer-secondary[.]z13[.]web[.]core[.]windows[.]net/f1795/index[.]html?clickid=d38ov0t5sqmc739od7pg
  •  hxxps://hreitue10[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hertiuwe5-secondary[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://breiuto1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hhweiu4-secondary[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://bewuirykj4[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nicesdder[.]pages[.]dev/ai2[.]mp3
  •  hxxps://hreiut4[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://ureyoiu5-secondary[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hhweiu3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nryiure1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://urtoyt-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreiut[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hhweiu1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito5-secondary[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://urtoyt1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo4-secondary[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://meriteu5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://utreteetwberbwber-secondary[.]z13[.]web[.]core[.]windows[.]net/f1795/index[.]html?clickid=d35o3ht5sqmc739n1rsg
  •  hxxps://meriteu-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nryiure4-secondary[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yweiur2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreiut2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://viruswarning0918usyy6tgc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://hhweiu3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hhweiu1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://neruo2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreiut-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreito1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ureyoiu2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://heiwurew2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://avacadobreadtheobroma[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://e3303e3303e3303190952b[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-888-319-6661
  •  hxxps://meriteu5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://sedmerererfuburbfe-secondary[.]z13[.]web[.]core[.]windows[.]net/f2486/index[.]html?clickid=d38qec55sqmc739ogtug
  •  hxxps://yeiwurw1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreito3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://heiwurew2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://bewuirykj1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreito1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://windows-security-alert-virus-detected-callus[.]pages[.]dev/
  •  hxxps://bewuirykj[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://ureyoiu4[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://neruo[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yweiur3-secondary[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreiut3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://viruswarning0917us3j3tzi[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://breiuto[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://17thseptwinerror2[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://afkhds10jnl[.]z13[.]web[.]core[.]windows[.]net/win[.]html
  •  hxxps://nreiut2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://viruswarning0917usjh8f5f[.]z13[.]web[.]core[.]windows[.]net/index[.]html
  •  hxxps://nryiure5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://uvosmikeorllkerfkerpf-secondary[.]z13[.]web[.]core[.]windows[.]net/a3603/?clickid=d354krd5sqmc739mg6t0
  •  hxxps://ureyoiu5[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hhweiu4[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreito3[.]z4[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hhweiu5-secondary[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://breiuto2-secondary[.]z27[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://breiuto1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://urtoyt4[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://squid-app-8nfbx[.]ondigitalocean[.]app/
  •  hxxps://hhweiu[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://1296720211654h289ot765[.]z13[.]web[.]core[.]windows[.]net/?&CLD=d362psbjt1js73fmqo6g&sou=32078eaee1368209c1fbe98ca&cost=food%25
  •  hxxps://dokder10-secondary[.]z30[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yweiur1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://dokder10[.]z30[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://6b703r25067f1446f82d24[.]z13[.]web[.]core[.]windows[.]net/?&CLD=d36r3updearc738l9b80&sou=3ed19305c1e2a8703948ea6b2916a673&cost=0dayrox&ip=Pennsylvania&city=Bradford&C5=0[.]6152&C6=25923&C7=RON&C8=&C9=
  •  hxxps://ureyoiu1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit3-secondary[.]z32[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://windows-security-alert[.]pages[.]dev/
  •  hxxps://urtoyt2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://tronkajms74edfc4[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nreiut1[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreiut5[.]z14[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://tronjkmh63wask[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://nryiure2[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreiut[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreit2[.]z26[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://breiuto5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nryiure5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://fxng35bgfj[.]z13[.]web[.]core[.]windows[.]net/win[.]html
  •  hxxps://yweiur1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nryiure3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yweiur-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://dokder12[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://viruswarning0917usc9khek[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://breiuto-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hhweiu2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://harddddddcodedddddmmm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://urtoyt3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://hreito4[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://mrosftsupport[.]site/imp/jyaslik[.]z6[.]web[.]core[.]windows[.]net/indexd41d[.]html
  •  hxxps://urtoyt4-secondary[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw4[.]z19[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://ureyoiu-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://jmklanginidpyy1[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=null
  •  hxxps://bewuirykj5[.]z20[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://zayshop[.]shop/
  •  hxxps://xswscfdmdnblor[.]z21[.]web[.]core[.]windows[.]net/
  •  hxxps://dipjklpdyy2[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=null
  •  hxxps://mccullock[.]org/
  •  hxxps://hreiut2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://breiuto5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreiut1-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://urtoyt1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://heiwurew5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw3[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://yeiwurw1[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ureyoiu4-secondary[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://upyateervruvuvrer-secondary[.]z13[.]web[.]core[.]windows[.]net/f1795/index[.]html?clickid=d38ej0d5sqmc739o6e20
  •  hxxps://nryiure1-secondary[.]z8[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://bewuirykj-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew3-secondary[.]z7[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://neruo5[.]z20[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://breiuto2[.]z27[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://coresedddddssbbbmmm[.]z19[.]web[.]core[.]windows[.]net/
  •  hxxps://minevghfdjseyr[.]blob[.]core[.]windows[.]net/$web/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://yeiwurw-secondary[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://dokder11[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://meriteu4[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://viruswarning0918us2g2gpc[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://breiuto3-secondary[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://bewuirykj2-secondary[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://dokder12-secondary[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://e3303e3303e3303190959b[.]z13[.]web[.]core[.]windows[.]net/Wi0nHelpSh0errc0de030/index[.]html?Anph=1-877-868-7299
  •  hxxps://seahorse-app-6p4ce[.]ondigitalocean[.]app/werrx01USAHTML/?bcda=1800-976-326
  •  hxxps://hreito4-secondary[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://heiwurew5[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://ureyoiu[.]z1[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://yweiur4-secondary[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hertiuwe5[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://hreiut4-secondary[.]z21[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://bewuirykj2[.]z22[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501
  •  hxxps://nreit4[.]z5[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nryiure2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://breiuto3[.]z35[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://urtoyt2-secondary[.]z29[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreit1-secondary[.]z24[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-888-844-8315
  •  hxxps://nreit5-secondary[.]z13[.]web[.]core[.]windows[.]net/wighwduqwudiqwdgiuwdg/?bcda=1-844-697-6501

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.
https://www.virustotal.com/gui/collection/user/noladefense/collections
https://otx.alienvault.com/user/noladefense/pulses

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  • If you entered any personal information, change all passwords and alert your bank and credit card companies.
  • Enable multi factor authentication to prevent access from attacker.
  • If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  • Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  • Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.