Example of all 4 domain that using phising /scam and Anydesk / Bitcoint

NR1

https://gtriotit-wqm.site

https://gtriotit-wqm.site ## ANNA.NS.CLOUDFLARE.COM 108.162.192.102 / LEE.NS.CLOUDFLARE.COM 172.64.33.129



the same website: gtriotit-wqm.site ## ANNA.NS.CLOUDFLARE.COM 108.162.192.102 / LEE.NS.CLOUDFLARE.COM 172.64.33.129

just changing theme


nr2

https://gtriotit-wqm.site

https://ironscape-he.cloud ## keaton.ns.cloudflare.com172.64.35.181 / novalee.ns.cloudflare.com 108.162.194.182


https://mullianias-herlleana-pro.cloud

https://mullianias-herlleana-pro.cloud ## macy.ns.cloudflare.com162.159.38.78 / ryan.ns.cloudflare.com 172.64.35.229


nr3

https://coredale-pf.cloud

https://coredale-pf.cloud ## dora.ns.cloudflare.com108.162.192.108 / evan.ns.cloudflare.com 173.245.59.165

All of them ending to different Whats App number. Some times same number. But Its changing alsmost every hr.

On whats App asking for ANY DESK and Bitcoint.


gtriotit-wqm.site ## ANNA.NS.CLOUDFLARE.COM 108.162.192.102 / LEE.NS.CLOUDFLARE.COM 172.64.33.129 Expires On2024-10-03 Registered On2023-10-03 Updated On2023-11-02


mullianias-herlleana-pro.cloud ## macy.ns.cloudflare.com162.159.38.78 / ryan.ns.cloudflare.com 172.64.35.229 Expires On2024-06-06 Registered On2023-06-06 Updated On2023-10-30


coredale-pf.cloud ## dora.ns.cloudflare.com108.162.192.108 / evan.ns.cloudflare.com 173.245.59.165 Expires On2024-09-11 Registered On2023-09-11 Updated On2023-10-30
ironscape-he.cloud ## keaton.ns.cloudflare.com172.64.35.181 /

novalee.ns.cloudflare.com 108.162.194.182 Expires On2024-10-09 Registered On2023-10-09 Updated On2023-10-30