# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: scattered spider, unc3944, unc6240, unc6661, unc6671, roasted oktapus, scatter swine, octo tempest, muddled libra, aa24-241a, pay2key, fox kitten, pioneer kitten, unc757, parisite, rubidium, lemon sandstorm, lucr-3, storm-0875, starfraud, poisonseed, scattered lapsus$, shiny hunters

# Reference: https://blog.group-ib.com/0ktapus
# Reference: https://otx.alienvault.com/pulse/6307925a7f9aa39ee9c66d3b
# Reference: https://www.virustotal.com/gui/ip-address/45.32.212.77/relations

activecampaign-okta.com
alorica-vpn.com
arise-okta.com
at-uid.com
atento-help.com
att-citrix.com
att-citrix.net
att-ctx.com
att-id.net
att-mfa.com
att-opus.net
att-rsa.com
att-sso.com
att-sso.net
att-support.org
att-uid.co
att-uid.com
att-uid.net
att-vmware.com
att-vpn.com
att-vpn.org
bandwidth-okta.com
bestbuy-vpn.com
binance-okta.com
box-okta.org
boxokta.com
cb-okta.com
cb-okta.net
cgslnc-okta.com
cloudflare-okta.com
coin-base-okta.com
concentrix-sso.com
concentrixhelp.com
concentrlx.com
conexusonline.com
corp-att.net
customer-internal.com
epicgames-okta.com
epicgames-vpn.com
evernote-onelogin.com
hubspot-sso.com
infosys-vpn.com
intercom-vpn.com
internai-customer.io
iqor-duo.com
iqor-duo.net
iqor-help.com
iqor-help.net
iqor-helpdesk.com
iqor-portal.com
iqor-sso.com
iqor-sso.net
iqor-tmobile.com
klaviyo-sso.com
kucoin-pin.com
kucoin-pin.net
kucoin-sso.com
kucoin-sso.net
kucoinpin.com
kucoinpin.net
loginxarth.tv
maiichlmp.com
mailchimp-help.com
mailchimp-okta.com
mailchimp-sso.com
mailgun-okta.com
manpowergroup-sso.com
mcsupport-okta.com
medailia-okta.com
metropcs-edge.net
microsoft-sso.net
mlcrosoft.cloud
mlcrosoft.info
mytpusa.com
mytpusa.net
okta-drop.com
okta-hubspot.com
okta-oath.com
okta-riotgames.com
okta-sso.net
okta-tmo.org
okta-tmobiie.net
okta-tmobile.org
one-login.co
opus-att.com
ouryahoo-okta.com
ouryahoo-okta.net
ouryahoo-okta.org
ouryahooinc-okta.com
quaifon.com
quaifone.com
qualfon-sso.com
riotgames-okta.com
riotgames-vpn.com
riotgames-vpn.net
rogers-help.net
rogers-rci.com
rogers-rci.net
rogers-sso.com
rogers-sso.net
rogers-ssp.com
sendgrid-okta.org
sinch-sso.com
sitel-help.com
sitel-sso.com
sitel-vpn.net
slack-mailchimp.com
snap-okta.com
snap-okta.net
sprint-idg.net
squarespacehr.com
startek-vpn.com
sutherlandglobal-vpn.com
sykes-help.com
sykes-sso.com
sykes-vpn.com
t-mobiie.co
t-mobiie.net
t-mobiie.org
t-mobile-okta.com
t-mobile-okta.net
t-mobile-okta.org
t-mobile-okta.us
t-mobile-sso.net
t-mobilers.com
t-moblie-okta.com
t-moblie.help
t-moblier.org
t-moblle.org
taskus-sso.com
taskus-vpn.com
techmahindra-sso.com
teleperformance-help.com
teleperformance-sso.com
teleperformance-usa.net
teleperformanceusa-sso.com
telus-sso.com
tmo-okta.com
tmo-sso.com
tmo-sso.net
tmobie.net
tmobile-okta.com
tmobile-okta.net
tmobiler.net
tmoble.net
tmoblie.net
tmoblle.co
tmoblle.net
tmoblle.org
tp-update.com
tp-usa.net
tpusa-citrix.com
transcom-help.com
transcom-sso.com
ttec-help.com
ttec-sso.com
ttec-vpn.com
ttecvpn.com
twiiio-okta.net
twiiio-sso.com
twiiio.net
twiiio.org
twilio-help.com
twilio-okta.com
twilio-sso.com
twit-vpn.com
twitter-okta.com
twlilo.net
uid-att.com
uscc-hr.com
verizon-sso.net
vzw-corp.net
vzwcorp.co
okta.tmobiie.net

# Reference: https://www.cyberresilience.com/threatonomics/resilience-threat-researchers-identify-new-campaigns-from-scattered-spider/

activecampaign-hr.com
activecampaignhr.com
activesso.com
actlvecampaign.net
aflac-hr.com
allstate-hr.com
ally-hr.com
amica-hr.com
applesso.com
assurionsso.net
asurion-idp.com
asurionsso.com
athene-usa.com
bbt-hr.com
bbt-work.com
bbtcorp.net
bbtemps.com
bbthour.com
bbtplus.com
bbtvpn.com
bell-hr.com
block-hr.com
block-sso.com
bn-sso.com
cashsso.com
cellularhr.com
cellularsaies.com
cellularsso.com
cgsinchr.com
charter-vpn.com
chartervpn.com
cinfin-hr.com
clicksend-staging.com
cofelyvision.com
connect-asurion.net
connect-cox.com
connect-sso.com
corp-cox.com
corp-foundever.com
corporate-ally.com
corporate-huntington.com
corporate-pnc.com
costsso.com
desksso.com
doordash-support.com
eclerx-sso.com
fidelitysso.com
fireblocks-sso.com
five9-hr.com
foundever-sso.com
freshdesksso.com
freshworks-sso.net
freshworksso.com
gemini-sso.com
gitlabhr.com
gitlabsso.com
grubhub-support.com
grubhubsso.com
hanover-hr.com
hr-intercom.com
hubsso.net
ibexgiobal.com
iliad-sso.com
infobbt.com
intercom-hr.com
intercomsso.net
kemper-support.com
klaviyo-hr.com
klaviyocorp.net
klavlyo.com
linkedinsso.com
login.suniife.com
mercury-hr.com
mutualofomaha-hr.com
my-tsl.com
my-tsl.net
my-twilio.com
myworkspaceinfo.com
newyorklifehr.com
nfp-hr.com
on-sinch.com
orange-sso.com
podium-hr.com
podiumsso.com
postmarksso.com
prntsrc.net
rbx-hr.com
rbxhr.net
realogy-hr.com
recurlysso.com
roblox-hrs.com
sec-sso.net
securian-hr.com
sharing-folders.com
sinchdev.com
singtei.net
square-sso.com
squarespace-hr.com
ssopodium.com
ssotelnyx.com
stargate-sso.com
supporthub-iqor.com
synchronyfinanciai.com
teiekom.net
telesignhr.com
telnyx-sso.com
telnyxsso.com
thrivent-hr.com
transamerica-hr.com
truecorphr.net
trustsso.com
unum-hr.com
unumhr.com
uscchr.com
usccplus.com
uscell.net
uscellular-hr.com
uscellular-sso.com
uscellularhr.com
victrasso.com
vz-hr.com
vzapps-vzn.com
walmartsso.com
walmartworkspace.com
workatbbt.com
yourbbt.com
zen-sso.com
zendesklt.com

# Reference: https://x.com/k3yp0d/status/1828903531664855489
# Reference: https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-241a
# Reference: https://app.validin.com/detail?find=45.76.65.42&type=ip4&ref_id=725dc1eb270#tab=resolutions
# Reference: https://www.virustotal.com/gui/ip-address/206.71.148.78/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.9.148.77/relations
# Reference: https://www.virustotal.com/gui/ip-address/78.141.238.182/relations

api.gupdate.net
app-api.team.beta.btest.cloud
app.team.beta.btest.cloud
beta.btest.cloud
btest.cloud
cdn.gupdate.net
cloud.sophos.one
forticloud.online
fortigate.forticloud.online
git-lab.net
githubapp.net
glthub.ddns.net
gupdate.net
hostmaster.git-lab.net
login.forticloud.online
sophos.one

# Reference: https://blog.eclecticiq.com/ransomware-in-the-cloud-scattered-spider-targeting-insurance-and-financial-industries

authenticate-bt.com
creditkarma-help.com
ibexglobai.com
revolut-ticket.com
servicenow-help.com
login.five9-hr.com
login.uscc-hr.com

# Reference: https://x.com/ValidinLLC/status/1835644171459117398
# Reference: https://www.validin.com/blog/coralling-scattered-spider-with-dns-history/

expediagroup-servicenow.com
freshworks-hr.com
okta-247.com
pfchangs-support.com
servicenow-hrblock.com
247-inc.okta-247.com
account.freshworks-hr.com
account.pfchangs-support.com
account.servicenow-hrblock.com
login.freshworks-hr.com
login.okta-247.com
login.pfchangs-support.com
login.servicenow-hrblock.com

# Reference: https://x.com/TLP_R3D/status/1836737521260109998

acwa-internal.com
applerevoke.com
binance-us-okta.com
coinbase-okta.com
consensys-okta.com
eu-apple.center
livechat-salesforce.com
mcointernal-okta.com
stargate-okta.com

# Reference: https://x.com/t43cr0wl3r/status/1836191001758646386
# Reference: https://pastebin.com/svE6Rz0N
# Reference: https://urlscan.io/search/#filename%3A%22WebResource.axd%22%20AND%20filename%3A%22MsAjaxJs%22%20AND%20filename%3A%22mdb.min.js%22

airtel-servicenow.com
alorica-cms.net
alorica-servicenow.net
alticeusa-helpdesk.com
asurioninc.net
atlassian-helpdesk.com
att-access.com
att-cso.com
att-login.net
att-portal.com
att-uid.org
attuid.net
attuid.org
beazley-sso.com
binance-sso.com
bnymellon-gateway.com
bnymellon-inc.com
bnymellon-internal.com
boxsso.com
cb-servicedesk.com
centerfieid.com
cgi-sso.com
channelportal-helpdesk.com
cms-dashboard.alorica.com
cognizant-sso.com
coinbase-sso.com
com-concentrix-postcv.online
comcast-schedule.com
comcast-schedules.com
comcast360.com
comcastschedule.com
concentrix-servicedesk.com
conduent-servicenow.com
corp-foundever.net
corpworkday.com
coxsso.com
cricket-sso.com
cricketwireiess.co
cricketwlreless.com
ctl-help.com
deiwarenorth.com
discord-sso.com
dropbox-corp.com
dxc-hr.com
ea-helpdesk.com
einstein-360.org
einstein360.net
einstein360.org
epic-servicedesk.com
evolution-sso.com
faneuli.com
fico-servicenow.com
fossil-sso.com
fox-internal.com
fox-sso.com
ibexsso.com
icare-sprint.com
icaresso.com
ienergizer-incidents.net
infocision.net
infosys-servicenow.com
infosys-servicenow.net
infosys-sso.com
infosys-sso.net
intuit-sso.com
jacksonhewitt-service.com
loreal-servicenow.com
loreal-sso.net
lowes-helpdesk.com
lowes-sso.com
macys-servicenow.com
macys-servicenow.net
macys-sso.com
macys-sso.net
mcolnteral.com
mod-sso.com
modsquad-sso.com
mongosso.com
msauth-setup.com
nuance-helpdesk.com
o2sso.com
oath-helpdesk.com
okta.cellularsaies.com
onetouchdlrect.net
onetouchsso.com
pacificlife-sso.net
paloaltonetworks-helpdesk.com
ping.taskus-sso.com
pldt-servicenow.net
preventphishing.net
quaifone.net
rbx-corp.com
rbx-servicedesk.com
recuriy.net
robinhood-servicedesk.com
rogers-helpdesk.net
servicenow-conduent.com
servicenow-ibex.com
servicenow-infosysapps.com
servicenow-sso.com
shopify-helpdesk.com
simpleidentity.help
singtel-corp.com
snapchat-sso.com
sprint-sso.net
sprlnt-sso.net
sprlnt.net
sprlnt.org
sprlntsso.com
sso-att.net
sso-sprint.com
sso-sprlnt.com
sso.ibexgiobal.com
ssoatt.com
ssorogers.com
ssotmo.com
stargatesso.com
sutheriandgiobal.com
sykes-agents.com
sykes-factor.com
syniverse-sso.com
syniverse-sso.net
teleperformance-incident.com
teleperformance-servicedesk.com
telint-helpdesk.com
telstra-sso.net
tmo.cx
tmobble.us
tmobie.org
transunion-sso.net
twiiiosso.com
twilio-sso.net
usceiiuiar.com
usceliuiar.com
wipro-inc.com
wiprohr.com
wlowes-sso.com
workingsolutions-corp.com
xub07-fdexwgl.us
yahoo-lnk.com
zd-corp.co
zd-corp.net
zdcorp.co
zdsso.net
zendesk-servicedesk.com
zendesk-sso.com
zendesk-sso.net
zendesksso.com

# Reference: https://x.com/banthisguy9349/status/1836787723065016678
# Reference: https://x.com/TLP_R3D/status/1837083934900789424

2-okta.com
account-okta.com
apexsumsol-okta.com
api-okta.com
apps.galaxydigital-okta.com
autoconfig.api-okta.com
autodiscover.api-okta.com
bitwise-okta.com
bitwise.bitwise-okta.com
campaignmonitor-okta.com
chia-okta.com
coinbase.reset-okta.com
corporatetools-okta.com
cosmotech.account-okta.com
dce-fleetdm.fleet-okta.com
deeptesting-okta.com
doodle-okta.com
example.hunters-okta.com
fleet-okta.com
flowdesk-okta.com
galaxydigital-okta.com
gravie-okta.com
hackerone-admin-okta.com
hackerone-okta.com
hubspot.login-okta.com
hunters-okta.com
iterable-okta.com
itbit-okta.com
jimdo-okta.com
kingston-okta.com
login-okta.com
login.corporatetools-okta.com
login.galaxydigital-okta.com
login.hunters-okta.com
login.jimdo-okta.com
login.login-okta.com
login.one.galaxydigital-okta.com
login.vice-okta.com
m.usaa-okta.com
mail.doodle-okta.com
mox-okta.com
mta-sts.api-okta.com
mx.doodle-okta.com
navi-okta.com
outlook.doodle-okta.com
reset-okta.com
scribe-api-okta.scribehow-okta.com
secure-okta.com
security-okta.com
shares-okta.com
squarespace-okta.com
tarsusrx-okta.com
turo.corporatetools-okta.com
usaa-okta.com
vice-okta.com
vice.vice-okta.com
yiwu-okta.com

# Reference: https://x.com/k3yp0d/status/1837769047204663338
# Reference: https://www.virustotal.com/gui/ip-address/199.247.14.229/relations
# Reference: https://www.virustotal.com/gui/ip-address/217.69.6.20/relations

amazonaws.work
eu-west-3.amazonaws.work
s3.amazonaws.work

# Reference: https://x.com/TLP_R3D/status/1838128760018673785

ultahub.com
ultainternal.com

# Reference: https://x.com/TLP_R3D/status/1838477165576196491

unchainedprod.com
unchainedprod-okta.com

# Reference: https://x.com/TLP_R3D/status/1843580380856856939
# Reference: https://x.com/ValidinLLC/status/1843605660086480927

bcbgroup-okta.com
condenast-hub-okta-emea.com
corporate-okta.com
gamestopinc-okta.com
help-okta.com
interceptpharma-okta.com
jumio-okta.com
kering-okta.com
louisvuitton-okta.com
nike-okta.com
okta-godaddy.com
okta-persona.com
okta-socure.com
oktamus-prime.com
persona-okta.com
revoke-okta.com
socure-okta.com

# Reference: https://x.com/TLP_R3D/status/1844109535759524070/history

incode-okta.com
okta-incode.com

# Reference: https://x.com/TLP_R3D/status/1844645314747080712
# Reference: https://www.virustotal.com/gui/ip-address/45.88.91.25/relations

dashboard-onelogin.com

# Reference: https://www.wiz.io/blog/unmasking-phishing-strategies-for-identifying-0ktapus-domains
# Reference: https://github.com/wiz-sec-public/wiz-research-iocs/blob/main/reports/0ktapus_phishing.csv

account-sendgrid.com
account.kemper-support.com
account.klaviyo-hr.com
account.securian-hr.com
activecampainhr.com
acwa-apple.com
adasupport-okta.com
alchemy-okta.com
apple-vpn.com
auth-alchemy.com
calendar-dd.com
commonspiritcorp-okta.com
contact-sendgrid.com
corescientific-okta.com
dashboard-mailgun.com
dashsso.com
docusign-okta.com
docusignhq.net
forward-icloud.com
galaxy-okta.com
gofundme-okta.com
grayscale-okta.com
grid-review.com
hr-gnc.com
intercom-okta.com
klav-workday.com
klaviyo-vpn.com
login.ally-hr.com
login.block-hr.com
login.corporate-ally.com
login.corporate-pnc.com
login.doordash-support.com
login.grubhub-support.com
login.hr-intercom.com
login.klaviyo-hr.com
login.nfp-hr.com
login.rbx-hr.com
login.realogy-hr.com
login.securian-hr.com
login.synchronyfinanciai.com
login.thrivent-hr.com
login.transamerica-hr.com
login.unum-hr.com
login.unumhr.com
luno-okta.com
manageactivity-sendgrid.com
markel-hr.com
mgmresorts-okta.com
mixpanel-okta.com
nike-support.com
okta-blockdaemon.com
okta-campaignmonitor.com
okta-cbhq.net
okta-gamestop.com
okta-intercom.com
okta-nydig.com
okta-onsolve.com
okta-ouryahoo.com
okta-ripple.com
okta-twilio.com
okta-verify.com
okta.com.shortid.support
onsolve-okta.com
ouryahoo.okta.com.shortid.support
paxos-okta.com
rbx.okta.bio
rejectauth-sendgrid.com
resolveservicedesk.com
review-mailgun.com
ripple-okta.com
sendgrid-account.com
sendgrid-overview.com
servicenowprod.com
sessions-sendgrid.com
settings-okta.com
snapchat-okta.com
sso-falconx.com
sso-klaviyo.com
stargatesso-gemini.com
storewatch-tmobile.com
sunrise-crypto.com
sync-apple.com
tickets.zapto.org
twillio-sendgrid.com
typeform-okta.com
verify-mailgun.com
verify-tmobile.com
xapo-okta.com
ziffdavis-okta.com

# Reference: https://x.com/TLP_R3D/status/1856795029781774738
# Reference: https://www.linkedin.com/posts/academy-intel-ops_threathunting-cti-scatteredspider-activity-7262761054001057792-KNWp/

adfs-cardinalhealth.com
louisvitton-okta.com
pennkey-upenn.com
revolut-okta.com
weblogin.pennkey-upenn.com

# Reference: https://app.validin.com/detail?find=adfs-cardinalhealth.com&type=dom#tab=host_pairs

80-78-22-124.cprapid.com
host-80-78-22-124.njalla.net
boardacess.com
office.boardacess.com
convert-meeting.duckdns.org
send-forget.duckdns.org
shareportfolio.duckdns.org
warmedals.duckdns.org
website-sitemap.duckdns.org

# Reference: https://x.com/TLP_R3D/status/1857715116856271313
# Reference: https://x.com/TLP_R3D/status/1859860985227485539
# Reference: https://x.com/TLP_R3D/status/1859970433677926751
# Reference: https://www.virustotal.com/gui/ip-address/91.212.166.88/relations

auth-okta-iterable.com
iterable-internal.com
magiclink-okta.com

# Reference: https://x.com/WhichbufferArda/status/1859320516471030256
# Reference: https://x.com/WhichbufferArda/status/1859323657517953160

americafirstmobiie.com
mintmobiie.com
tmobiie.com
tmobiie.us
staging.tmobiie.com

# Reference: https://x.com/TLP_R3D/status/1861068253709185063

okta-snapchat.com

# Reference: https://x.com/TLP_R3D/status/1861076050848915785
# Reference: https://urlscan.io/search/#hash%3A4f415598183d3a6e31967b850a25a1a19c41b698e0695e2426a34ffa39d46f34

boardacess.com
okta-revolut.com

# Reference: https://x.com/WhichbufferArda/status/1861060536776999256
# Reference: https://urlscan.io/search/#hash%3A8293806652949fc5056d2b841ad30010a8e83e0e6adfb102ef83c73bdea074eb

iuiuiemon.com
vision-victra.com

# Reference: https://x.com/TLP_R3D/status/1873000180716376261
# Reference: https://www.virustotal.com/gui/ip-address/185.196.10.89/relations

sts-okta.com
takeaway-okta.com
grubhub.sts-okta.com
login.takeaway-okta.com
logitech.sts-okta.com
lyft.sts-okta.com
tinder.sts-okta.com
turo.sts-okta.com
workday.takeaway-okta.com

# Reference: https://x.com/lontze7/status/1882367142823367121

okta-louisvuitton.com

# Reference: https://x.com/ValidinLLC/status/1904823536507597240
# Reference: https://www.validin.com/blog/pulling_threads_on_phishing_campaign/
# Reference: https://app.validin.com/detail?find=Cloudflare%20Captcha&type=raw&ref_id=59ae4f5ec75#tab=host_pairs (# 2025-03-29)

amazonturkie.net
asset-hyperliquid.com
cm-verificatie.com
eigenlayer-assets.com
falseadvertisinginposts.com
firmware-llive.com
firmware-server12.com
flo-sot.org
flur-fhs.net
hubservices-crm.com
iiiuvium-io.com
liquitidy-pepe.com
live-sso.com
loginportal-sendgrid.net
mail-chimpservices.com
mailchimp-ssologin.com
pay-bancontact.com
portal.sendgridssoservices.com
redirect-sso.com
sendgridssoservices.com
server12-mchimp.com
server9-hubspot.com
server9-mailgun.com
server9-sendgrid.net
sso-account.com
sso-loginservices.com
sso-signon.com
sso-walletmanager.com
support.loginportal-sendgrid.net
swell-assets.com
worldofmobile.top

# Reference: https://app.validin.com/detail?type=hash&find=e62b574d06923e36af33f7be0a4a57aa#tab=host_pairs

account-mailgun.com

# Reference: https://app.validin.com/detail?type=hash&find=9e17f7847085a9302e40c87789155ad8#tab=host_pairs

account-sendgrld.com
authentication-sendgrid.com
dev-sendgrid.com
ftm-wallet.com
help-sendgrid.com
jtfersion.com
kineomager.net
payment-sendgrid.com
secure-sendgrld.com
services-sendgrid.com

# Reference: https://x.com/silentpush/status/1906552060213944395
# Reference: https://app.silentpush.com/shared/3444ce10-8d54-48a1-a981-4f8a7957517a/

okta-experian.com
root.okta-experian.com

# Reference: https://www.silentpush.com/blog/poisonseed/
# Reference: https://app.validin.com/detail?find=Cloudflare%20Captcha&type=raw&ref_id=06b040b1779#tab=host_pairs (# 2025-04-04)

account-sso-login.com
account-ssoservices.com
active-mailgun.com
activisionsuport.com
barefoots-api.com
cloudflare-sendgrid.com
complete-sendgrid.com
connect1-coinbase.com
connect5-coinbase.com
firmware-llive.com
google-sso-login.com
inquiry-loginp.com
iosjdfsmdkf.com
myaccount-hbspot.com
mysite-clflre.com
mysrver-chbackend.com
mysso-accounts.com
mysso-accountservices.com
myw-cbw.com
mywallet-cbsmartw.com
mywallet-cbsmw.com
mywallet-cbupgrade.com
nikafk244.com
password-proxy-redirect.com
response-crmsg.com
response-loginportal.com
response16-sendgrid.com
response20-sendgrid.com
responseinquiry-tos.com
responsesendgrid.com
review-termsconditions.com
revokecblink.com
rseponse-manageprod.com
rseponse25-sendgrid.com
rseponsequery.com
support-zoho.com
swallet-coinbase.com

# Reference: https://www.silentpush.com/blog/scattered-spider-2025/

7-eleven-hr.com
activecampiagn.net
bestbuy-cdn.com
birdsso.com
citrix-okta.com
corp-asurion.com
corp-hubspot.com
cts-comcast.com
duelbits-cdn.com
gryscale-ox0d.com
gucci-cdn.com
iyft.net
morningstar-okta.com
mytsl.net
okta-ziffdavis.com
pure-okta.com
signin-nydig.com
simpletexting-cdn.com
sso-instacart.com
sts-vodafone.com
sytemstern.net
x-sso.com

# Reference: https://app.validin.com/detail?type=ip&find=84.200.154.137#tab=resolutions (# 2025-04-29)

google-security-services.com
internal-ssologin.com
mange-accountsecurity.com
security-googleservices.com
okta.internal-ssologin.com

# Reference: https://www.virustotal.com/gui/ip-address/172.67.176.238/relations

managerewards-cbexchange.com

# Reference: https://app.validin.com/detail?type=raw&find=Interest+Claim#tab=host_pairs (# 2025-04-30)

claimrewards-cbinterest.com
manager-accsecurity.com

# Reference: https://app.validin.com/detail?find=185.196.11.96%2F28&type=ip&ref_id=dfcf47cebfb#tab=resolutions (# 2025-05-01)

login-sendgrid.net
login-twilio.com
signin-sendgrid.com

# Reference: https://www.virustotal.com/gui/ip-address/104.21.64.1/relations

superaffective-twilio.com

# Reference: https://www.virustotal.com/gui/ip-address/198.148.92.239/relations

app-twilio.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=180&depth=0&find=%2F%5E%5Ba-z%5D%2B-sendgrid%5C.%28com%7Cnet%29%24%2F (# 2025-05-03)

darren-sendgrid.com
hub-sendgrid.com
mail-sendgrid.com
myaccount-sendgrid.com
panel-sendgrid.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=180&depth=0&find=%2F%5E%5Ba-z%5D%2B-okta%5C.%28com%7Cnet%29%24%2F (# 2025-05-03)

allvuesystems-okta.com
bit-okta.com
copart-okta.com
creditkarma-okta.com
dashboard-okta.com
domo-okta.com
equitytrust-okta.com
exness-okta.com
fivetran-okta.com
gsrio-okta.com
idp-okta.com
mangopay-okta.com
massmutual-okta.com
mtk-okta.com
newscorp-okta.com
paradigmxyz-okta.com
petco-okta.com
preply-okta.com
schedule-okta.com
taxbit-okta.com
tyler-okta.com
uber-okta.com
unbounce-okta.com
wealthpark-okta.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=180&depth=0&find=%2F%5Eokta-%5Ba-z%5D%2B%5C.%28com%7Cnet%29%24%2F (# 2025-05-03)

okta-alternative.net
okta-articulate.com
okta-dzcontrolplane.com
okta-emeea.com
okta-fcawitech.com
okta-galaxydigital.com
okta-log.com
okta-nike.com
okta-notify.com
okta-npmjs.com
okta-onslove.com
okta-reset.com
okta-stellantis.com
okta-strongdm.com
twilio-internal.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=180&depth=0&find=%2F%5E%28okta%7Csendgrid%7Ctwilio%29-%5Ba-z%5D%2B%5C.%28com%7Cnet%29%24%2F (# 2025-05-03)

twilio-solutions.com
twilio-x.com

# Reference: https://x.com/h2jazi/status/1918291921916526730
# Reference: https://www.fortinet.com/blog/threat-research/fortiguard-incident-response-team-detects-intrusion-into-middle-east-critical-national-infrastructure
# Reference: https://www.fortinet.com/content/dam/fortinet/assets/reports/report-incident-response-middle-east.pdf

appstgs.com
encoremir.com
hewlettpackardupdates.info
mozilla.one
postman.sh
savooks.com
zerotier.app
connect.mozilla.one
schema.postman.sh
social.zerotier.app
gist.githubapp.net
apps.gist.githubapp.net

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=90&depth=2&find=%2F%5E%5Ba-z%5D%2B-sso%5C.%28com%7Cnet%29%24%2F (# 2025-05-07)

ai-sso.com
aliasintelligence-sso.com
amci-sso.com
asurion-sso.net
bit-sso.com
bses-sso.com
bytedance-sso.com
collegenet-sso.com
grid-sso.com
jlr-sso.com
mygov-sso.com
orthoscan-sso.com
oss-sso.com
sport-sso.com
trustetc-sso.com
verify-sso.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=90&depth=2&find=%2F%5Esso-%5Ba-z%5D%2B%5C.%28com%7Cnet%29%24%2F (# 2025-05-07)

sso-accountservices.com
sso-akb.com
sso-binance.com
sso-crypto.com
sso-dms.com
sso-gservices.com
sso-juliusbaer.com
sso-juliusbaer.net
sso-juliusbar.com
sso-juliusbar.net
sso-ki.com
sso-mydf.com
sso-mygov.com
sso-nutrition.com
sso-ontic.com
sso-relay.com
sso-rhisac.com
sso-roblox.com
sso-sa.com
sso-securelogin.net
sso-socure.com
sso-solanocounty.com
sso-update.com
sso-venndigital.com
sso-x.com
sso-zweiplus.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=90&depth=2&find=%2F%5Eservicenow-%5Ba-z%5D%2B%5C.%28com%7Cnet%29%24%2F (# 2025-05-07)

servicenow-moveworks.com
servicenow-paulpace.com
servicenow-talentrecruitment.com

# Reference: https://app.validin.com/lookalikes?limit=1000&lookback=90&depth=2&find=%2F%5E%5Ba-z%5D%2B-servicenow%5C.%28com%7Cnet%29%24%2F (# 2025-05-07)

alldus-servicenow.com
iss-servicenow.com
themeweaver-servicenow.com
travelportprod-servicenow.com
uts-servicenow.com

# Reference: https://x.com/MichalKoczwara/status/1924723457628979390

microsoftoffice-login.com
okta.microsoftoffice-login.com
sso.microsoftoffice-login.com

# Reference: https://blog.checkpoint.com/research/exposing-scattered-spider-new-indicators-highlight-growing-threat-to-enterprises-and-aviation/

chipotle-sso.com
gemini-servicedesk.com
hubspot-okta.com

# Reference: https://x.com/0x534c/status/1942471119606317211

aliyun-sso.com
ametek-sso.com
anddigital-sso.com
bambang-sso.com
barclays-sso.com
bdtronic-sso.com
beehiiv-sso.com
biz-sso.com
carlsondesigngroup-sso.com
cna-sso.com
devonindustrial-sso.com
dfm-sso.com
dont-play-sso.com
jbhunt-sso.com
magiceden-sso.com
markel-sso.com
marriott-sso.com
meta-sso.com
microcms-dev-sso.com
mircosoft-sso.com
s-sso.com
tha-sso.com
tirerack-sso.com
tirerackwholesale-sso.com

# Reference: https://x.com/0x534c/status/1943193477963202786
# Reference: https://x.com/0x534c/status/1943332710812127741

auth-sso.com
click.auth-sso.com
lucidwooddesign.auth-sso.com
okta.auth-sso.com
static.auth-sso.com

# Reference: https://x.com/soursecc/status/1943419721736741111
# Reference: https://www.virustotal.com/gui/ip-address/188.166.149.50/relations

alm.gg
mangopay-atlassian.net
mangopay-okta.com
synlace.ai

# Reference: https://x.com/soursecc/status/1943770159334011217
# Reference: https://www.virustotal.com/gui/ip-address/18.218.209.243/relations

kennedywilsoninc.com
okta.kennedywilsoninc.com
update.kennedywilsoninc.com
verify.kennedywilsoninc.com

# Reference: https://x.com/soursecc/status/1943791386677195213

internetsecuritysoftware.org
iconectiv.internetsecuritysoftware.org

# Reference: https://x.com/soursecc/status/1944146722135171311
# Reference: https://www.virustotal.com/gui/ip-address/146.70.87.184/relations

www-mlcrosoft.com
account.www-mlcrosoft.com
sso.www-mlcrosoft.com
ssoo.www-mlcrosoft.com

# Reference: https://app.validin.com/detail?find=04aebf27c395b815352512c6789bbe57&type=hash&ref_id=f93fce9e94d#tab=host_pairs (# 2025-07-13)

mcicrosoft.com
microsoff.net
sso.mcicrosoft.com
sso.microsoff.net
ssoo.mcicrosoft.com
ssoo.microsoff.net

# Reference: https://x.com/soursecc/status/1944421786810229077

ec2-18-117-173-7.us-east-2.compute.amazonaws.com

# Reference: https://x.com/ishivtripathi/status/1945351070672412691

unanet-okta.com

# Reference: https://dti.domaintools.com/newly-identified-domains-likely-linked-to-continued-activity-from-poisonseed-e-crime-actor/
# Reference: https://github.com/DomainTools/SecuritySnacks/blob/main/2025/PoisonSeed_Domains_July2025.csv

371757-ledger.com
3c-portals.com
4191384-ledger.com
419931-ledger.com
587273-ledger.com
662772-ledger.com
774828-ledger.com
927372-ledger.com
accesos-login.com
accesos-portalweb.com
access-portal-ftx.com
accessg0vportal.icu
accessonlineservice.icu
accessreviewportal.icu
accesswe3llsportal.com
account-dispute-portal.center
accountlogin-bitpanda.com
acesso-despachante.com
acessodasguiasfacilitado.com
acessodespachanteremoto.com
acessoguiasdespachodosc.com
acessoguiasremotas.com
acessoveiculos-contato.com
acessportalcustomer-w3lls.top
activate-myledger.com
acueductoportal.com
api-sendgridservice.com
app-gestorportal.com
app-infologin.com
app-infoportal.com
app-inicioportal.com
app-logininfo.com
app-logininicio.com
app-loginmovil.com
app-loginweb.com
app-portal-clientes.com
app-portal-usuarios.com
app-portalweb.com
app-soporte-portal.com
app-usuarios-portalweb.com
assessmentserviceportal.icu
at-ledger.com
atencion-portal.com
au-accessportal.info
au-info-login.com
au-service-login.com
aug0vportal.icu
ausportal.info
auth-ledger.net
autogridrepair.com
autoportalclientes.com
autoportaldigital.com
aviso-loginweb.com
aviso-portalapp.com
avisos-loginapp.com
avisos-portalapp.com
avisos-portalweb.com
banca-login.com
banca-portal.com
bankinter-empresaslogin.com
bankinter-portal.com
bitpanda-accountlogin.com
carrofaciportal.com
centerlink2025portal.com
checkledgerdevice.com
cibcsecureportal.com
claimreportportal.cc
claims-portal-celsius.network
clientdeskportal.live
clienteautoportal.com
clientportal-auth.com
coba-sicherheitsportal.app
coinbase-security-portal.com
comdi-sicherheitsportal.app
commerz-systemportal.com
commerzsicherheitsportal.com
confirm-gridwork-fabric.com
connect-ledgerlive.com
connections-ledger.com
consumerportal-coinbase.com
customonlinelogin-ato.com
dash-sendgrid.com
dashboard-ledgerlive.com
dashboard-sendgridlogin.com
dashboard-sendgridnetwork.com
dashloginpoint.info
daten-portal.live
de-ledger.app
de-login.cc
designportal.net
deuba-serviceportal.com
device-sendgrid.com
digitalautoportal.com
discover-portal.com
duedocumentportal.icu
ebranch-login.pro
email-sendgridservice.com
emboldculogin.com
empresa-loginweb.com
empresa-portalseguro.com
empresas-bbva-login.com
empresas-loginweb.com
enter-sendgridnetwork.com
entryupdateportal.icu
es-accesologin.com
es-accesos-login.com
es-accesso-ayuda.com
es-app-portal.com
es-app-portalweb.com
es-avisologin.com
es-avisoportal.com
es-avisosportal.com
es-login-avisos.com
es-login-incidencia.com
es-login-inicio.com
es-logingestion.com
es-portal-acceso.com
es-portal-aviso.com
es-portal-avisos.com
es-portal-avisoweb.com
es-portal-datos.com
es-portal-incidencias.com
es-portal-servicios.com
es-portal-soporte.com
es-portalaviso.com
es-portalweb-clientes.com
es-portalweb-soporte.com
es-portalweb-usuarios.com
es-soporte-portalweb.com
es-soportes-portalweb.com
es-usuario-login.com
es-weblogin.com
escritorioclienteportal.com
escritorioportaldigital.com
facilidadedasemissoes.com
facilportalcarro.com
fartlessofsol.net
ffcbusinessolb-secure.com
firmware-ledgerlive.com
firmwareledger-live.com
firmwareportal.tech
firstledgerextension.store
fix-ledger.com
fix-sendgrid.com
ftx-access-portal.com
ftx-notice-portal.com
ftx-portal-notice.com
g-login.net
g-logins.net
g0vserviceportal.icu
gatewaytaxlogin.com
gcareersapplyportal.com
gcareersgrid.com
gcareershiregrid.com
gcareersroleportal.com
gcareersstaffgrid.com
gcareersteamgrid.com
gcareersworkgrid.com
germany-ledger.com
gestion-login.com
gestion-portal.com
gestiones-portal.com
gestiones-portalweb.com
gestor-portal.com
giris-portal.com
girisportali24.com
girisportali24.vip
giro-portal.com
gjobsportalpro.com
gmailservices-login.com
google-activityportal.com
google-secureportal.com
google-securityportal.com
govauinboxclientsecure-login.com
govauinboxservices-securelogin.com
govausecureclientlogin.com
govservicesau-loginsecure.com
grandpashabetlogin.com
grandpashabetlogin2025.com
grecruitjobportal.com
grecruitportal.com
gtalentportal.com
gteamportal.com
gteamsportal.com
guncellogin.vip
gworkportal.com
hargreavesonlineportal.com
home-loginguv.com
https-sendgrid.com
ie-renewlogin.com
incidencia-login.com
incidencias-webportal.com
info-datafilingportal.icu
info-loginapp.com
info-loginbankinter.com
info-loginusuario.com
info-loginusuarios.com
info-loginweb.com
info-portalapp.com
ingreso-login.com
inicio-loginapp.com
inicio-portalweb.com
inicioclienteportal.com
iniciodigitalportal.com
intellix-capitalone-login.cc
internal-ledger.com
internal-sendgrid.com
it-ledger.net
itslogin.net
jokerbetgrid.com
krollra-portal.com
ledger-alerts.com
ledger-app-setup.com
ledger-authorise.com
ledger-dapps.com
ledger-device-setup.com
ledger-devicechecks.com
ledger-diagnostic.support
ledger-germany.com
ledger-live-restore.com
ledger-live-verifikation.com
ledger-liverepair.com
ledger-nl.net
ledger-security.net
ledger-start.com
ledger-web.app
ledger-web.com
ledgerassets.live
ledgerfirmwareupdater.com
ledgerhelpsdesk.com
ledgerliveassets.com
ledgernotification.com
ledgernotifications.com
ledgernotify.com
ledgerrepaircheck.com
ledgersecureupdate2025.live
ledgersoftware.live
ledgerwalletinsure.com
lgn-mylodgesubmisson.online
login-2025hemen.com
login-accesd.com
login-acceso.com
login-accesoinfo.com
login-accesos.com
login-adrows.com
login-advertencia.com
login-alertmedia.com
login-appbankinter.com
login-aud-gov.com
login-aus-serv.com
login-aus-serv.net
login-aus-server.net
login-auth-microsoft.com
login-avisoinfo.com
login-avisosweb.com
login-c2025.com
login-coinbase.com
login-e-pueyo.com
login-gestion.com
login-gestor-bankinter.com
login-gestorweb.com
login-hmgov.com
login-infobankinter.com
login-infousuarios.com
login-ingresos.com
login-inicioweb.com
login-malina.casino
login-myservces.info
login-myyahoo.com
login-portalweb.com
login-resmi.com
login-soportesweb.com
login-usuarioinfo.com
loginaccessonline.com
logindifferent.top
logininfosupport.top
loginkadlyainvite321.com
loginkafaceithuy22.com
loginlink3.com
loginmytxtimeau.com
logins-google.com
logins-mygov.live
loginservice-ato.com
loginsolflare.com
logintaxsupport.top
logintomyinfo.com
loginusuario-bankinter.com
loginweb-bankinter.com
manage-ledgerlive.com
mbloginbusiness.com
memberhelpsportal.live
membershelpportal.live
moonridgeportal.info
my-aus-login.com
my-info-aus-login.com
my2025reviewportal.info
mycraportal.com
mydashboardportal.cc
myhargreavesportal.com
myledger-dashboard.com
myledgerdashboard.com
myledgerupdated.com
myledgerupdates.com
myloginfoau.com
myportal-centre-link.tax
myportal-icloud.com
myrbcportals.com
mysandgrid.com
myscotiaportal.com
nabausecurelogin-verify.com
native-sendgrid.com
navigate-sendgrid.com
network-ledger.live
network-sendgrid.com
networkledger.live
newadviceportal.com
newclaimportal.icu
nl-ledger.app
nl-ledger.com
nledgerlive.com
noreplybutdotherightfullogin.top
notice-portal-ftx.com
official01portal-dproc.icu
onlinebanking-login.com
ontbenefitportal.com
openledgercheck.xyz
padisahbet-girisportali.com
particulares-portal.net
partnerdashboard-sglogin.com
patch-ledgerfirmware.com
portal-alerta.com
portal-appbankinter.com
portal-appinfo.com
portal-appinicio.com
portal-assistencia.com
portal-atencion.com
portal-autenticacion.com
portal-auth03.com
portal-auth04.com
portal-auth3.com
portal-avisoapp.com
portal-avisos.com
portal-avisosweb.com
portal-bankinter.com
portal-bridge.app
portal-cliente.com
portal-coin-base.com
portal-consulta.com
portal-consultas.com
portal-cuentas.com
portal-datos.com
portal-directo.com
portal-gestion.com
portal-gestor.com
portal-gestores.com
portal-goldendragon.online
portal-hubspotinc.com
portal-identidad.com
portal-incidencia.com
portal-incidente.com
portal-infoapp.com
portal-infobankinter.com
portal-informacion.com
portal-inicioapp.com
portal-jeton.com
portal-loginapp.com
portal-notices.com
portal-particular.com
portal-shib.com
portal-shib.net
portal-sophon.com
portal-soporteinfo.com
portal-soportes.com
portal-soportesweb.com
portal-soportevirtual.com
portal-ssg.com
portal-st.com
portal-usuariosweb.com
portal-verificacion.com
portal-web.info
portal-weblogin.com
portalatendevirtual.com
portalatendimentocarros.com
portalatendimentocliente.com
portalautodigital.com
portalbirdge.net
portalbirge.com
portalcarrodigital.com
portalccir.com
portalclienteautomoveis.com
portaldigitalauto.com
portaldigitaltransito.com
portaldoautoonline.com
portalfacilauto.com
portalpagseguro.online
portalrbc2.com
portalrbc3.com
portalrefveiculo.com
portalreservista.com
portalservicocarro.com
portalservicosauto.com
portalservicoveiculos.com
portalstobitcoin.xyz
portaltobitcoin.app
portaltobltcoin.com
portalveiculoscliente.com
portalweb-bankinter.com
premium-sicherheitsportal-targo.com
propfirmreviewportal.top
providerportalont.com
ptb-portal.com
ptb-portaltobitcoin.com
quickassessportal.icu
quicklogin-chme.top
quicklogin-w3lls.com
quicklogin-w3lls.top
quotex-login-bd.com
quotex-login-in.com
quotex-login-pk.com
rbc-portal-manage.com
rbc1portal.com
rbcdeviceportal1.com
rbcportaldevice.com
rbcportalsecure.com
reactivatemyledger.com
recoveryportal-gmail.com
regions-one-pass-login.com
remote-sendgridlogin.com
reset-mylogin.com
reset-myportal.com
resetmyportal.com
scotiaportal1.com
secureaccessportalw3lls.top
secureportal-google.com
securityupdate-ledger.com
segurossoatmundial.top
sendportallogin.com
servicesauclientlogin.com
servicosportalescritorio.com
servicoveiculosportal.com
servicportaltxlodg.top
session-sendgrid.com
sgservices-login.com
sheesha-portal.com
shibportal-token.com
shibtoken-portal.org
shturvlteamlogin.com
signal-matrix-gridwork.com
smartportal-coinbase.com
soporte-loginapp.com
soporte-portalweb.com
soportes-portal.com
sso-sendgrid.com
sso-sendgridnetwork.com
swiftportalprotocol.live
swiftportalsyn.xyz
swim-login.top
systemic-gridwork-light.com
t-sendgrid.com
targo-xportale.com
terminateloginsession.com
thegridindexsend.com
thesenddashboardgrid.com
thesendgatewaygrid.com
thesendindexgrid.com
ticketportal-google.com
tr-logins.com
trakesso.com
trezor-portalsuite.com
trezorsuite-portal.com
truis02tsigni02ndsbar-login-dashbaord.pro
unicredit-login.com
updatemssoft.com
urgencia-portal.com
us-mailchimplogin.com
userdashportal.info
userportal1frostbank.com
userreviewportal.icu
userserviceportal.icu
usuario-portal.com
usuarios-portal.com
usuarios-portalweb.com
vb-portal.com
verificacion-login.com
verify-ledger.com
verifyloginrbc.com
verifyportalcustomer-w3lls.top
verseportal.claims
w7-ledgerlive.com
web-infoportal.com
web-loginbankinter.com
web-loginportal.com
web-portalsoporte.com
webhook-sendgridservice.com
webportal-bankinter.com
www-login-adwopbs.com
xenoledgerwallet.eu.com
xportal-targo.com
yenilogin.vip
yourevalportal.icu

# Reference: https://x.com/lontze7/status/1973996772704825351

gappartnersolutions.com
gapplicant.com
gapplicantalent.com
gapplicantapp.com
gapplicantapply.com
gapplicantbase.com
gapplicantboard.com
gapplicantbridge.com
gapplicantcareer.com
gapplicantcenter.com
gapplicantconnect.com
gapplicantcrew.com
gapplicantdesk.com
gapplicantdirect.com
gapplicantevaluate.com
gapplicantfinder.com
gapplicantfirst.com
gapplicantflow.com
gapplicantfocus.com
gapplicantforce.com
gapplicantform.com
gapplicantglobal.com
gapplicantgroup.com
gapplicantgrowth.com
gapplicanthr.com
gapplicanthub.com
gapplicantinsight.com
gapplicantjobboard.com
gapplicantjoblist.com
gapplicantjobmarket.com
gapplicantjobportal.com
gapplicantjobs.com
gapplicantlink.com
gapplicantlist.com
gapplicantmatch.com
gapplicantnetwork.com
gapplicantnext.com
gapplicantopportunity.com
gapplicantpage.com
gapplicantpartners.com
gapplicantpath.com
gapplicantpeople.com
gapplicantplatform.com
gapplicantpool.com
gapplicantportal.com
gapplicantpositions.com
gapplicantpro.com
gapplicantprofile.com
gapplicantprogress.com
gapplicantqueue.com
gapplicantroles.com
gapplicantsearch.com
gapplicantstaff.com
gapplicantstaffing.com
gapplicantteam.com
gapplicantvision.com
gapplicantwork.com
gapplicantworkforce.com
gapplicantworks.com
gapplicantworld.com
gapplicantzone.com
gapplyapplicant.com
gapplyboard.com
gapplybridge.com
gapplycareer.com
gapplyconnect.com
gapplycrew.com
gapplyflow.com
gapplyform.com
gapplyglobal.com
gapplyhire.com
gapplyhiring.com
gapplyhr.com
gapplyinvitation.com
gapplyinvite.com
gapplyjobs.com
gapplyline.com
gapplymanager.com
gapplynow.com
gapplyoffice.com
gapplyonboard.com
gapplypathway.com
gapplyportal.com
gapplypro.com
gapplyquick.com
gapplyready.com
gapplyrole.com
gapplyselect.com
gapplystaff.com
gapplytalent.com
gapplyteam.com
gapplyvacancy.com
gapplywave.com
gapplywork.com
gapplyzone.com
gcareeralign.com
gcareerapplicant.com
gcareerbase.com
gcareerbridge.com
gcareercandidate.com
gcareercandidates.com
gcareercenter.com
gcareerconnect.com
gcareerconnects.com
gcareerdirect.com
gcareeremployment.com
gcareerenlist.com
gcareerenroll.com
gcareerenrollment.com
gcareerfinder.com
gcareerflow.com
gcareerglobal.com
gcareerhire.com
gcareerhiring.com
gcareerhub.com
gcareerinsight.com
gcareerjobportal.com
gcareerjobs.com
gcareerjobslist.com
gcareerjobsportal.com
gcareerlink.com
gcareerlists.com
gcareermatch.com
gcareernetwork.com
gcareernext.com
gcareernow.com
gcareeropportunities.com
gcareeropportunity.com
gcareerpartners.com
gcareerpath.com
gcareerpaths.com
gcareerpathways.com
gcareerpeople.com
gcareerplanner.com
gcareerplatform.com
gcareerportal.com
gcareerpositions.com
gcareerprogress.com
gcareerrecruit.com
gcareerrecruitment.com
gcareerroles.com
gcareersaction.com
gcareersappclick.com
gcareersapphub.com
gcareersapplicantlist.com
gcareersapplicantzone.com
gcareersapplied.com
gcareersapplybase.com
gcareersapplycenter.com
gcareersapplydirect.com
gcareersapplyit.com
gcareersapplyline.com
gcareersapplylink.com
gcareersapplylist.com
gcareersapplypage.com
gcareersapplypro.com
gcareersapplypulse.com
gcareersapplytrack.com
gcareersapplyway.com
gcareersapplyzone.com
gcareerscandidatebase.com
gcareerscandidatedesk.com
gcareerscandidateflow.com
gcareerscandidatelink.com
gcareerscandidatelist.com
gcareerscandidates.com
gcareerscareer.com
gcareerscareerboost.com
gcareerscareerdesk.com
gcareerscareerfit.com
gcareerscareerhunt.com
gcareerscareerlink.com
gcareerscareerstart.com
gcareerscareertrack.com
gcareerscentral.com
gcareerscheck.com
gcareersconnecthire.com
gcareersconnecthub.com
gcareersconnects.com
gcareerscrewconnect.com
gcareerscrewfind.com
gcareerscrewlink.com
gcareerscrewmanager.com
gcareerscrewmatch.com
gcareerscrewready.com
gcareerscrewtrack.com
gcareerscrewzone.com
gcareersdirect.com
gcareersedge.com
gcareersentryhub.com
gcareersentryline.com
gcareersfetch.com
gcareersfield.com
gcareersfill.com
gcareersfillnow.com
gcareersfillrole.com
gcareersfind.com
gcareersfindbase.com
gcareersfindcrew.com
gcareersfinderspot.com
gcareersfindit.com
gcareersfindjob.com
gcareersfindrole.com
gcareersfocus.com
gcareersforce.com
gcareersfusion.com
gcareersgetapplied.com
gcareersgetcrew.com
gcareersgethired.com
gcareersgetjob.com
gcareersgetjobs.com
gcareersgetrole.com
gcareersgetteam.com
gcareersgrow.com
gcareershireassist.com
gcareershirebase.com
gcareershirecenter.com
gcareershireclick.com
gcareershireconnect.com
gcareershiredesk.com
gcareershirefind.com
gcareershirefit.com
gcareershireflow.com
gcareershireit.com
gcareershirejump.com
gcareershirelane.com
gcareershireline.com
gcareershirelist.com
gcareershirematch.com
gcareershireme.com
gcareershirepoint.com
gcareershirepulse.com
gcareershirequick.com
gcareershiretrack.com
gcareershireup.com
gcareershirezonehub.com
gcareershiringcrew.com
gcareershiringdeck.com
gcareershiringform.com
gcareershiringhub.com
gcareershiringportal.com
gcareershiringroom.com
gcareershiringtrack.com
gcareershiringzone.com
gcareershrengine.com
gcareershrhub.com
gcareershrlane.com
gcareershrmatch.com
gcareershrnetwork.com
gcareershub.com
gcareersinsight.com
gcareersjobbridge.com
gcareersjobchannel.com
gcareersjobcircle.com
gcareersjobdirect.com
gcareersjobfind.com
gcareersjobfinder.com
gcareersjobfinderhub.com
gcareersjobflow.com
gcareersjobhub.com
gcareersjobline.com
gcareersjobmatchr.com
gcareersjobnetwork.com
gcareersjobopen.com
gcareersjobpostings.com
gcareersjobpulse.com
gcareersjobready.com
gcareersjobroll.com
gcareersjobslide.com
gcareersjobslist.com
gcareersjobslot.com
gcareersjobstarter.com
gcareersjobsuite.com
gcareersjobteam.com
gcareersjobway.com
gcareersjoincrew.com
gcareersjoinhub.com
gcareersjoinline.com
gcareersjoinup.com
gcareerslane.com
gcareersleads.com
gcareerslineup.com
gcareerslinkup.com
gcareerslist.com
gcareersloop.com
gcareersmatch.com
gcareersmatchjobs.com
gcareersmatchlist.com
gcareersmatchr.com
gcareersmatchrole.com
gcareersmatchup.com
gcareersmove.com
gcareersnetworks.com
gcareersnextjob.com
gcareersnextrole.com
gcareersnextup.com
gcareersonboarding.com
gcareersopen.com
gcareersopencrew.com
gcareersopenmatch.com
gcareersopenpath.com
gcareersopenrolehub.com
gcareersopenroles.com
gcareerspace.com
gcareerspathmatch.com
gcareerspathup.com
gcareerspathway.com
gcareerspin.com
gcareerspitch.com
gcareersplan.com
gcareerspoint.com
gcareersposition.com
gcareerspositioning.com
gcareerspositionline.com
gcareersposthub.com
gcareerspot.com
gcareerspulse.com
gcareersqueue.com
gcareersquick.com
gcareersquickapply.com
gcareersquickhire.com
gcareersquickline.com
gcareersquickmatch.com
gcareersquickrole.com
gcareersquickroles.com
gcareersquickteam.com
gcareersrank.com
gcareersreadyup.com
gcareersreadywork.com
gcareersrecruitfast.com
gcareersrecruitflow.com
gcareersrecruitinglist.com
gcareersrecruitlink.com
gcareersrecruitlist.com
gcareersrecruitloop.com
gcareersrecruitpath.com
gcareersrecruittrack.com
gcareersresumelink.com
gcareersrolebook.com
gcareersrolecenter.com
gcareersrolecloud.com
gcareersroleconnect.com
gcareersroledesk.com
gcareersroleentry.com
gcareersrolefinder.com
gcareersrolefit.com
gcareersroleflow.com
gcareersrolelane.com
gcareersroleline.com
gcareersrolelist.com
gcareersrolematch.com
gcareersrolepath.com
gcareersrolepoint.com
gcareersrolepost.com
gcareersrolepulse.com
gcareersrolequeue.com
gcareersrolestart.com
gcareersrolesync.com
gcareersroletrack.com
gcareersroleway.com
gcareersroleworks.com
gcareersrolezone.com
gcareersroster.com
gcareersrosterpro.com
gcareersscheduleflow.com
gcareersscheduleline.com
gcareersscope.com
gcareersshift.com
gcareersshifted.com
gcareersshiftsearch.com
gcareersshiftstart.com
gcareersside.com
gcareersskillhub.com
gcareersslotline.com
gcareersslots.com
gcareersspotlight.com
gcareersstack.com
gcareersstaffboard.com
gcareersstaffcenter.com
gcareersstaffcloud.com
gcareersstaffers.com
gcareersstafffinder.com
gcareersstaffhiring.com
gcareersstaffhub.com
gcareersstaffingpro.com
gcareersstafflane.com
gcareersstaffline.com
gcareersstafflink.com
gcareersstaffpath.com
gcareersstaffpool.com
gcareersstaffsync.com
gcareersstafftools.com
gcareersstaffup.com
gcareersstartnow.com
gcareerssync.com
gcareerstaff.com
gcareerstalenthub.com
gcareersteamfind.com
gcareersteamhub.com
gcareersteamline.com
gcareersteps.com
gcareerstracker.com
gcareersuser.com
gcareersvacancies.com
gcareersvacancieslist.com
gcareersvacancybase.com
gcareersvacancyform.com
gcareersvacancyhq.com
gcareersvacancylist.com
gcareersvacancypath.com
gcareersvision.com
gcareersway.com
gcareersworkbridge.com
gcareersworkchannel.com
gcareersworkcloud.com
gcareersworkcrew.com
gcareersworkform.com
gcareersworkhub.com
gcareersworkline.com
gcareersworklist.com
gcareersworkmatch.com
gcareersworknow.com
gcareersworkready.com
gcareersworks.com
gcareersworksearch.com
gcareersworkshift.com
gcareertalent.com
gcareertalenthub.com
gcareertalents.com
gcareerteam.com
gcareertrack.com
gcareerup.com
gcareervacancies.com
gcareerwork.com
gcareerworkforce.com
gcareerworks.com
gcareerworld.com
gcareerzone.com
ghiredesk.com
ghireexpert.com
ghireflow.com
ghirejump.com
ghireline.com
ghirelink.com
ghirematch.com
ghireopen.com
ghirepath.com
ghirepathway.com
ghireplace.com
ghirepro.com
ghirespot.com
ghirestaff.com
ghiretalent.com
ghireteam.com
ghiretrack.com
ghirewave.com
ghireway.com
ghirework.com
ghirezone.com
ghiringbase.com
ghiringbridge.com
ghiringcall.com
ghiringconnect.com
ghiringcrew.com
ghiringdesk.com
ghiringenroll.com
ghiringflow.com
ghiringform.com
ghiringhub.com
ghiringjobs.com
ghiringline.com
ghiringlineup.com
ghiringnext.com
ghiringnow.com
ghiringpath.com
ghiringpathway.com
ghiringpeople.com
ghiringpost.com
ghiringpro.com
ghiringscope.com
ghiringscout.com
ghiringsearch.com
ghiringstaff.com
ghiringtalents.com
ghiringteam.com
ghiringvacancy.com
ghiringway.com
ghiringwork.com
ghiringzone.com
grecruitagency.com
grecruitapplicant.com
grecruitapplicants.com
grecruitapply.com
grecruitbase.com
grecruitbridge.com
grecruitcareers.com
grecruitcrew.com
grecruitdesk.com
grecruitdigital.com
grecruitedge.com
grecruitemployee.com
grecruiterspro.com
grecruitfinder.com
grecruitflow.com
grecruitfocus.com
grecruitforce.com
grecruitglobal.com
grecruitgroup.com
grecruithire.com
grecruithr.com
grecruithub.com
grecruiting.com
grecruitingapplications.com
grecruitingapply.com
grecruitingbase.com
grecruitingboard.com
grecruitingbridge.com
grecruitingcandidate.com
grecruitingcareer.com
grecruitingcenter.com
grecruitingconnect.com
grecruitingcrew.com
grecruitingdesk.com
grecruitingemployees.com
grecruitingflow.com
grecruitingforce.com
grecruitinggrowth.com
grecruitinghire.com
grecruitinghq.com
grecruitinghr.com
grecruitinghrtech.com
grecruitinghub.com
grecruitinginsight.com
grecruitingjobboard.com
grecruitingjobportal.com
grecruitingjobs.com
grecruitinglink.com
grecruitingmanager.com
grecruitingmatch.com
grecruitingnetwork.com
grecruitingnext.com
grecruitingnow.com
grecruitingopportunity.com
grecruitingpartners.com
grecruitingpath.com
grecruitingpeople.com
grecruitingplace.com
grecruitingplus.com
grecruitingportal.com
grecruitingpositions.com
grecruitingpro.com
grecruitingprocess.com
grecruitingprofile.com
grecruitingresources.com
grecruitingroles.com
grecruitingstaff.com
grecruitingstage.com
grecruitingtalent.com
grecruitingteam.com
grecruitingtrack.com
grecruitingwave.com
grecruitingwise.com
grecruitingwork.com
grecruitingworkforce.com
grecruitingworks.com
grecruitingworld.com
grecruitingzone.com
grecruitinsight.com
grecruitjobboard.com
grecruitjobs.com
grecruitjobslist.com
grecruitjoin.com
grecruitlineup.com
grecruitlink.com
grecruitlisting.com
grecruitmatch.com
grecruitnetwork.com
grecruitonboard.com
grecruitonline.com
grecruitopenings.com
grecruitopportunity.com
grecruitpartners.com
grecruitpeople.com
grecruitpipeline.com
grecruitplatform.com
grecruitplus.com
grecruitpool.com
grecruitpositions.com
grecruitpro.com
grecruitprocess.com
grecruitrise.com
grecruitroles.com
grecruitsearch.com
grecruitspot.com
grecruitstaff.com
grecruittalent.com
grecruitteam.com
grecruitvacancy.com
grecruitvision.com
grecruitwork.com
grecruitworkforce.com
grecruitworks.com
grecruitzone.com
gtalentaccess.com
gtalentapplication.com
gtalentapply.com
gtalentbase.com
gtalentboard.com
gtalentcall.com
gtalentclick.com
gtalentconnect.com
gtalentcrew.com
gtalentdesk.com
gtalentdirect.com
gtalentedge.com
gtalentenlist.com
gtalentenroll.com
gtalentenrolling.com
gtalentenrollment.com
gtalentfinder.com
gtalentfit.com
gtalentflow.com
gtalentfound.com
gtalentglobal.com
gtalenthire.com
gtalenthr.com
gtalentinsight.com
gtalentinvitation.com
gtalentinvite.com
gtalentjob.com
gtalentjobs.com
gtalentlaunch.com
gtalentlead.com
gtalentline.com
gtalentlink.com
gtalentmatch.com
gtalentmatcher.com
gtalentmeet.com
gtalentmove.com
gtalentnetwork.com
gtalentpath.com
gtalentpathway.com
gtalentpipeline.com
gtalentpitch.com
gtalentplace.com
gtalentpost.com
gtalentprohire.com
gtalentqueue.com
gtalentquick.com
gtalentreach.com
gtalentready.com
gtalentrecruit.com
gtalentrole.com
gtalentschedule.com
gtalentscout.com
gtalentsearch.com
gtalentselect.com
gtalentsource.com
gtalentstaff.com
gtalentsync.com
gtalentteam.com
gtalenttrack.com
gtalentwave.com
gtalentway.com
gtalentwork.com
gtalentworker.com
gtalentworks.com
gtalentzone.com
gteamapplicant.com
gteamapplicants.com
gteamapply.com
gteamapplynow.com
gteamappoint.com
gteamappointment.com
gteamassign.com
gteamboard.com
gteamcalendar.com
gteamcandidate.com
gteamcandidates.com
gteamcareer.com
gteamcareerhub.com
gteamcareers.com
gteamconnect.com
gteamconnecthub.com
gteamconnectline.com
gteamconnectnow.com
gteamcontacts.com
gteamcrew.com
gteamemploy.com
gteamenroll.com
gteamenrollment.com
gteamfinder.com
gteamfinders.com
gteamform.com
gteamhire.com
gteamhired.com
gteamhireflow.com
gteamhirehub.com
gteamhireline.com
gteamhirelink.com
gteamhiring.com
gteamhr.com
gteamhrdesk.com
gteamhrhub.com
gteamhrpro.com
gteamhrworks.com
gteamhrzone.com
gteamjobdesk.com
gteamjobfinder.com
gteamjobflow.com
gteamjobhub.com
gteamjobhunt.com
gteamjobline.com
gteamjoblist.com
gteamjobmatch.com
gteamjobopen.com
gteamjobpath.com
gteamjobpost.com
gteamjobs.com
gteamjobsboard.com
gteamjobseek.com
gteamjobslots.com
gteamjobspot.com
gteamjobtrack.com
gteamjoin.com
gteamline.com
gteamlineup.com
gteamlink.com
gteamlistings.com
gteammatchhub.com
gteamnetwork.com
gteamoccupation.com
gteamonboard.com
gteamonboarding.com
gteamopenings.com
gteamopportunity.com
gteamplacement.com
gteamposition.com
gteampositions.com
gteamprofessions.com
gteamqueue.com
gteamrecruit.com
gteamrecruiters.com
gteamrecruitment.com
gteamregister.com
gteamrolehub.com
gteamrolematch.com
gteamroles.com
gteamsapplicants.com
gteamsappoint.com
gteamsbridge.com
gteamscandidates.com
gteamscareers.com
gteamschedule.com
gteamsconnect.com
gteamscrews.com
gteamsemployee.com
gteamsenroll.com
gteamsenrollment.com
gteamshift.com
gteamshifthub.com
gteamshiftline.com
gteamshiftpro.com
gteamshire.com
gteamshr.com
gteamsjobhunt.com
gteamsjobs.com
gteamslink.com
gteamsmatch.com
gteamsnetwork.com
gteamspath.com
gteamspositions.com
gteamsrecruit.com
gteamsregister.com
gteamsroles.com
gteamsschedule.com
gteamsstaff.com
gteamsstaffing.com
gteamstaffer.com
gteamstaffhub.com
gteamstaffing.com
gteamstalent.com
gteamsvacancy.com
gteamswork.com
gteamsworkers.com
gteamtalent.com
gteamtalenthub.com
gteamtalenthunt.com
gteamtimetable.com
gteamvacancies.com
gteamvacancy.com
gteamworkers.com
gteamworkforce.com
gteamworkhub.com
gteamworkline.com
apply.gappartnersolutions.com
apply.gcareerenroll.com
apply.gcareerjobportal.com
apply.gcareerroles.com
apply.gcareersapplyit.com
apply.gcareerscheck.com
apply.gcareerscrewzone.com
apply.gcareersinsight.com
apply.gcareersjobchannel.com
apply.gcareersjobhub.com
apply.gcareersjobline.com
apply.gcareersjobway.com
apply.gcareersopenmatch.com
apply.gcareersplan.com
apply.gcareerspositioning.com
apply.gcareerspositionline.com
apply.gcareersroleline.com
apply.gcareersrolepulse.com
apply.gcareersslots.com
apply.gcareersvacancies.com
apply.gcareersvacancypath.com
apply.gcareersworknow.com
apply.gcareertalent.com
apply.gcareerteam.com
apply.gcareertrack.com
apply.gcareerup.com
apply.gcareervacancies.com
apply.ghiredesk.com
apply.ghirejump.com
apply.ghireline.com
apply.ghireopen.com
apply.ghirepath.com
apply.ghirespot.com
apply.ghiretalent.com
apply.ghiretrack.com
apply.ghirewave.com
apply.ghireway.com
apply.ghiringbase.com
apply.ghiringbridge.com
apply.ghiringconnect.com
apply.ghiringcrew.com
apply.ghiringdesk.com
apply.ghiringenroll.com
apply.ghiringform.com
apply.ghiringlineup.com
apply.ghiringnext.com
apply.ghiringpathway.com
apply.ghiringpeople.com
apply.ghiringpost.com
apply.ghiringscope.com
apply.ghiringscout.com
apply.ghiringsearch.com
apply.ghiringstaff.com
apply.ghiringtalents.com
apply.ghiringvacancy.com
apply.ghiringway.com
apply.ghiringwork.com
apply.grecruitagency.com
apply.grecruitapplicant.com
apply.grecruitbase.com
apply.grecruitbridge.com
apply.grecruitcareers.com
apply.grecruitdesk.com
apply.grecruitdigital.com
apply.grecruitedge.com
apply.grecruitfinder.com
apply.grecruitflow.com
apply.grecruitfocus.com
apply.grecruitforce.com
apply.grecruitglobal.com
apply.grecruitgroup.com
apply.grecruithire.com
apply.grecruithub.com
apply.grecruiting.com
apply.grecruitingbridge.com
apply.grecruitingcareer.com
apply.grecruitingcenter.com
apply.grecruitingdesk.com
apply.grecruitingflow.com
apply.grecruitingforce.com
apply.grecruitinggrowth.com
apply.grecruitinglink.com
apply.grecruitingnetwork.com
apply.grecruitingnext.com
apply.grecruitingnow.com
apply.grecruitingpartners.com
apply.grecruitingplace.com
apply.grecruitingplus.com
apply.grecruitingportal.com
apply.grecruitingpositions.com
apply.grecruitingpro.com
apply.grecruitingtrack.com
apply.grecruitingwise.com
apply.grecruitingworks.com
apply.grecruitinsight.com
apply.grecruitjobboard.com
apply.grecruitjobportal.com
apply.grecruitjobs.com
apply.grecruitjoin.com
apply.grecruitlink.com
apply.grecruitmatch.com
apply.grecruitnetwork.com
apply.grecruitonline.com
apply.grecruitopportunity.com
apply.grecruitpartners.com
apply.grecruitplatform.com
apply.grecruitplus.com
apply.grecruitpool.com
apply.grecruitpro.com
apply.grecruitprocess.com
apply.grecruitrise.com
apply.grecruitroles.com
apply.grecruitsearch.com
apply.grecruittalent.com
apply.grecruitvision.com
apply.grecruitwork.com
apply.grecruitworks.com
apply.grecruitzone.com
apply.gtalentmatcher.com
apply.gtalentnetwork.com
hire.gapplicantprofile.com
hire.grecruitingconnect.com
hire.gtalentpath.com
hire.gtalentquick.com
hire.gteamappoint.com
hire.gteamassign.com
hire.gteamcandidates.com
hire.gteamcareer.com
hire.gteamcareerhub.com
hire.gteamconnecthub.com
hire.gteamconnectline.com
hire.gteamcontacts.com
hire.gteamhireflow.com
hire.gteamhirehub.com
hire.gteamjobmatch.com
hire.gteamlistings.com
hire.gteamnetwork.com
hire.gteamonboarding.com
hire.gteamqueue.com
hire.gteamshift.com
hire.gteamshire.com
hire.gteamsmatch.com
hire.gteamsstaff.com
hire.gteamsvacancy.com

# Reference: https://x.com/MalasadaTech808/status/1974572978034897313

ytcareers.com
ytcareersadvisor.com
ytcareersapply.com
ytcareersbase.com
ytcareersbridge.com
ytcareerscenter.com
ytcareersconnect.com
ytcareerscrew.com
ytcareersdirect.com
ytcareersglobal.com
ytcareersheadhunt.com
ytcareershire.com
ytcareershiring.com
ytcareershr.com
ytcareershrtech.com
ytcareershub.com
ytcareersinsight.com
ytcareersjobboard.com
ytcareersjobportal.com
ytcareersjobs.com
ytcareersmatch.com
ytcareersnetwork.com
ytcareersnext.com
ytcareersonboard.com
ytcareersopenings.com
ytcareersopportunities.com
ytcareerspartners.com
ytcareerspath.com
ytcareerspeople.com
ytcareersplacement.com
ytcareersportal.com
ytcareerspositions.com
ytcareersprime.com
ytcareersrecruit.com
ytcareersroles.com
ytcareerstalent.com
ytcareersteam.com
ytcareersunion.com
ytcareerswave.com
ytcareersworld.com
ytcareerszone.com

# Reference: https://x.com/AlvieriD/status/1974039073942598138

shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion

# Reference: https://x.com/MalasadaTech808/status/1975741649008664715

aquent-calendly.com
aquent-career.com
aquent-globaljobs.com
aquent-google.com
aquent-hire.com
aquent-hiring.com
aquent-professionals.com
aquent-recruiters.com
aquent-recruiting.com
aquent-recruitment.com
aquent-scheduling.com
aquent-staffing.com
aquent-updates.com
bxcback2025xxx23vnvn.onrender.com

# Reference: https://x.com/AlvieriD/status/1976904661782392962

http://95.129.236.86
shinyhunt.rs

# Reference: https://x.com/vxdb/status/1978525107195650264

shinyhunte.rs

# Reference: https://x.com/MalasadaTech808/status/1978088757686338038

ytcareersapplication.com
ytcareersdesk.com
ytcareersenroll.com
ytcareersgroup.com
ytcareersgrow.com
ytcareersinvite.com
ytcareersjob.com
ytcareersjoin.com
ytcareersopportunity.com
ytcareersprogress.com
ytcareersprospect.com
ytcareersregister.com
ytcareerssearch.com
ytcareersselect.com
ytcareersstaffing.com
ytjobsadvance.com
ytjobsapplyhub.com
ytjobsapplynow.com
ytjobsbridge.com
ytjobsbuild.com
ytjobscareer.com
ytjobscareerpath.com
ytjobscenter.com
ytjobscenterhub.com
ytjobscollab.com
ytjobsconnects.com
ytjobsdesk.com
ytjobsemployment.com
ytjobsenrollment.com
ytjobsflow.com
ytjobsfocus.com
ytjobsglobal.com
ytjobsgoals.com
ytjobsgroup.com
ytjobsgrow.com
ytjobsgrowth.com
ytjobshires.com
ytjobshiring.com
ytjobsinvite.com
ytjobslaunch.com
ytjobsline.com
ytjobslink.com
ytjobslist.com
ytjobslisting.com
ytjobsmatch.com
ytjobsmember.com
ytjobsnetwork.com
ytjobsnetworkhub.com
ytjobsnext.com
ytjobsnow.com
ytjobsopenings.com
ytjobspartner.com
ytjobspath.com
ytjobspathway.com
ytjobspeople.com
ytjobsplace.com
ytjobsplatform.com
ytjobsprogress.com
ytjobsprospects.com
ytjobsrecruiters.com
ytjobsrecruiting.com
ytjobsrecruitment.com
ytjobssearch.com
ytjobsselect.com
ytjobssquad.com
ytjobsstaff.com
ytjobsstaffing.com
ytjobssubmit.com
ytjobssuccess.com
ytjobsteams.com
ytjobsunit.com
ytjobsvacancies.com
ytjobsworkplace.com
ytjobsworks.com
ytjobszone.com

# Reference: https://www.linkedin.com/posts/activity-7383963361740374016-BwK0

sso-forbes.com

# Reference: https://www.silentpush.com/blog/threat-check/

login-request.com
okta.login-request.com

# Reference: https://www.virustotal.com/gui/ip-address/23.227.199.73/relations

msftdocserv.online
msftdocserver.online
account.msftdocserv.online
account.msftdocserver.online
advh.msftdocserv.online
advh.msftdocserver.online
autsh.msftdocserv.online
autsh.msftdocserver.online
dods.msftdocserv.online
dods.msftdocserver.online
isd.msftdocserver.online
kuwilogin.msftdocserv.online
login.msftdocserver.online
msd.msftdocserv.online
msd.msftdocserver.online
o.msftdocserver.online
outk.msftdocserver.online
oviwlogin.msftdocserver.online
sautsa.msftdocserv.online
sautsa.msftdocserver.online
sci.msftdocserv.online
sci.msftdocserver.online
sece.msftdocserv.online
sece.msftdocserver.online
smth.msftdocserv.online
smth.msftdocserver.online
sso.msftdocserv.online
sso.msftdocserver.online
t.msftdocserv.online
t.msftdocserver.online
ulup.msftdocserv.online
ulup.msftdocserver.online
usaa.msftdocserv.online
usaa.msftdocserver.online
vhg.msftdocserv.online
vhg.msftdocserver.online
ywb.msftdocserv.online
ywb.msftdocserver.online

# Reference: https://x.com/WhichbufferArda/status/1992240526083621293
# Reference: https://blog.eclecticiq.com/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications

corporate-microsoft.com
help-allvuesystems.com
internal-okta.com
sharepoint-comcast.com
sharepoint-workplaceview.com
signin-okta.com
workday-hubspot.com
workday-nike.com
bmcorpuser.internal-okta.com

# Reference: https://www.virustotal.com/gui/ip-address/185.247.224.41/relations

data.xn--ota-7ua.com
o101443.ingest.signin-okta.com
o101443.ingest.xn--ota-7ua.com
patreon.signin-okta.com
patreon.xn--ota-7ua.com
signin-okta.com
trial-6887823.xn--ota-7ua.com
trial-9374202.xn--ota-7ua.com
verify-0kta.com
xn--ota-7ua.com

# Reference: https://x.com/AlvieriD/status/2004493040975810729

lapsus-group.com

# Reference: https://x.com/AlvieriD/status/2005221523129561138

lapsus.sh
www07.mutu.shrd.fr

# Reference: https://x.com/AlvieriD/status/2014726791366074646

toolatedhs5dtr2pv6h5kdraneak5gs3sxrecqhoufc5e45edior7mqd.onion

# Reference: https://x.com/ishivtripathi/status/2017151238488674660
# Reference: https://urlscan.io/search/#filename%3A%20%22backend.php%3Faction%3Dcheck_redirect.%22
# Reference: https://urlscan.io/search/#filename%3A%20%22index.php%3Fpasstoken%3D%26redirect%3D%2F%22

http://149.50.97.174
101201-coinspot.com
118507coinbase.com
124521-coinbase.com
124521coinbase.com
158726trezor.com
412721coinbase.com
419256crypto.com
501938binance.com
53253binance.com
67849-cb.com
72812coinbase.com
72825google.com
72826google.com
72830google.com
72850google.com
728568google.com
729536google.com
78261gemini.com
78355google.com
78382google.com
812577google.com
831955-binance.com
852319-ndax.com
953536-cb.com
account-ndax.com
account-ndax.io
accounts-nexo.com
admin.118507coinbase.com
admin.412721coinbase.com
admin.419256crypto.com
admin.501938binance.com
admin.852319-ndax.com
admin.account-ndax.io
admin.device-verizon.com
admin.help-cointracker.com
adyeninternal.com
adyensso.com
agent0.mcpcore.xyz
albertsonsinternal.com
aliyun.mcpcore.xyz
alliantenergyinternal.com
alliantsso.com
alnylamsso.com
amazoninternal.com
amgeninternal.com
amplitudeinternal.com
amwaterinternal.com
aoshermaninternal.com
app-eternl.io
applovinsso.com
assets.dex2c.com
atlassiansso.com
atocalculation.com
attcustomercare.net
auth.lyqent.com
avalonbayinternal.com
avisonyounginternal.com
awardcosso.com
ballinternal.com
basanta.app
basten.mcpcore.xyz
batrachomyomachy.thesixcontent.com
batrachomyomachy1.thesixcontent.com
bazarr.erfi.io
bettermentinternal.com
bill.vortexhost.pro
binanapi-912512.com
brixmorsso.com
brixmorssoo.com
brookfieldsso.com
calendlyinternal.com
canforinternal.com
carharttsso.com
carvanasso.com
catchmeifyoucanfbi.com
centerspacesso.com
chat.basanta.app
chat.mcpcore.xyz
claude.mcpcore.xyz
cloudflare.mcpcore.xyz
cloverhealthsso.com
cnainsurancesso.com
coba-saja.kyglobalapi.my.id
coindesksso.com
compassmineralsinternal.com
cousinsinternal.com
cozensso.com
cp.myyalemanager.com
crowleyinternalized.com
crowleysso.com
crypto-ato.com
csod-internal.com
cubyworld.xyz
deepinfra.mcpcore.xyz
device-verizon.com
devices-nexo.com
dex2c.com
discover.local.getfire.bot
discover.prod.getfire.bot
discover.staging.getfire.bot
doitbestinternal.com
dokopanel.com
draw.mcpcore.xyz
drfirstsso.com
dropboxinternal.com
epicgamessso.com
etaxsso.com
fedexauth.com
fedexmfa.com
fedexpurpleid.com
fedexuserauth.com
flocksafetyinternal.com
flyexclusiveinternal.com
fomo-burn.com
fortniteisfun4324325.lol
foxrothschild-internal.com
fried-rice-spiderblack329.com
fullstoryinternal.com
globusmedicalsso.com
grandjxcvjc.com
growmarksso.com
guildmortgageinternal.com
guildmortgagesso.com
hbfsso.com
help-cointracker.com
hendricksso.com
henryscheinsso.com
host-185-193-127-201.njalla.net
howardhughessso.com
htmoni.com
hubspotinternal.com
icloudcases.com
il2cppdumper.basanta.app
imap.mcpcore.xyz
intercominternal.com
inv-sales-management-mysharepoint.com
invsumit.com
ironmountainsso.com
jackhenrysso.com
jetbluesso.com
jetexinternal.com
justicepourlesautochtones.com
kennedywilsonsso.com
koinlylegal.io
kyglobalapi.my.id
l6.restriction-nexo.com
lambwestonsso.com
legal-koinly.io
lendleaseinternal.com
littelfuseinternal.com
llamaswap.io
login-comcast.net
lvmhinternal.com
lyqent.com
m1financesso.com
macerichsso.com
mail.mcpcore.xyz
marainternal.com
marcjacobsinternal.com
marinerinternal.com
mcpcore.xyz
mercuryinsurancesso.com
mfa-53.com
mfa-fedex.com
mfa-global-e.com
miguelcorreia.com
mixpanelinternal.com
mnksso.com
modernasso.com
morningstarsso.com
morrisdicksonsso.com
myabbvieinternal.com
myacornsinternal.com
myadyeninternal.com
myadyensso.com
myaffirminternal.com
myamgensso.com
myaoshearman.com
myaresmgmt.com
mybeehiiv.com
mybettermentsso.com
mybiogeninternal.com
myblockinternal.xyz
mybrixmorsfso.com
mybrixmorsso.com
mybrookfieldsso.com
mybwater.com
mybwatersso.com
mycanvainternal.com
mycathaysso.com
mycathyinternal.com
mychainalysis.com
mychainlinkinternal.com
mychrobinson.com
mycoldwellsso.com
mycovsso.com
mycrowleysso.com
mydechert.com
mydicksmanager.com
mydisneyconnect.com
mydisneymanager.com
mydisneysso.com
mydropboxinternal.com
myfigureinternal.com
mygamestopsso.com
mygoodmansso.com
mygoodrxsso.com
myharvardkey.com
myhioscar.com
myhklawinternal.com
myhoganlovells.com
myhremea.com
myhubspotinternal.com
myiqeq.com
myjbhifi.com
myjetnetsso.com
myjumio.com
mykkrconnect.com
mykkrinternal.com
myklinternal.com
mylockelord.com
mylvmhgroup.com
mym1finance.com
mymastecsso.com
mymckessonconnect.com
mymckessoninternal.com
mymckessonsso.com
mymethanexsso.com
mymicrostrategy.com
mymlpinternal.com
mymnksso.com
mymoonpay.com
mymweinternal.com
mynavmanadbsnsger.com
mynavmanagbsnsjser.com
mynbamanager.com
mynetjetsinternal.com
mynextgeninternal.com
mynikemanager.com
mypaulhastings.com
mypaulweissinternal.com
mypersonainternal.com
mypetcomanager.com
mypetsmartmanager.com
myplaidinternal.com
mypolsinelli.com
mypublixmanager.com
mypurpleconnect.com
mypurpledirect.com
mypurpleid.com
mypurpleidsso.com
mypurplemanager.com
myqeinternal.com
myqesso.com
myreasso.com
myredfininternal.com
myrobinskaplan.com
myrolexinternal.com
mysequoiainternal.com
mysidley.com
mysonosinternal.com
mysonossso.com
mysquarespaceinternal.com
mysquarespacesso.com
mysynchronyfinancialinternal.com
mytelstrainternal.com
mytucowsinternal.com
mytyson.com
myuberinternal.com
myubersso.com
myupennmanager.com
mywayfairconnect.com
mywealthsimpleinternal.com
mywealthsimplesso.com
mywinstonsso.com
myxerointernal.com
myyalemanager.com
myzerohashinternal.com
myzoominternal.com
navidrome.erfi.io
nepseo.basanta.app
netjets.support
neurocrinesso.com
newtesting232.com
northgeorgiacivils.com
novsso.com
oceaneeringinternal.com
oceaneeringsso.com
odflsso.com
okta.bczlm.club
otsuka.theseventhfloor.eu.cc
overview-gmail.com
panel.vortexhost.pro
parkwellsorganization.it.com
paulhastinginternal.com
paulhastingsinternal.com
paywall-project.pages.dev
pendointernal.com
perkinscoieinternal.com
perkinscoiesso.com
portal-xfinity.com
publicstorageinternal.com
purpleidauth.com
purpleidconnect.com
purpleidsso.com
realogysso.com
realpageinternal.com
redfinsso.com
regencyinternal.com
reliancesso.com
restriction-nexo.com
ringcentralsso.com
robinhood-verify.com
safety-river.com
sarvam.mcpcore.xyz
sdjifsijdfisdf.com
search.basanta.app
securitygate.app
seerr.erfi.io
semprasso.com
servicenowsso.com
shift4internal.com
smtp.mcpcore.xyz
sonosinternal.com
sonosinternals.com
spinmasterinternal.com
sso-amplitude.com
sso-global-e.com
suncommunitessso.com
suninternal.com
suninternals.com
surgerypartnersinternal.com
swaps-defillama.com
talenenergysso.com
telnyx.mcpcore.xyz
tempshare.mcpcore.xyz
test.mcpcore.xyz
test.silver.inc
test1234.miguelcorreia.com
testinglmfao59.xyz
testwcms1.xyz
theamgensso.com
thebiogensso.com
tollbrotherssso.com
trinetinternal.com
troutmaninternal.com
uchealthinternal.com
underarmoursso.com
vaneckinternal.com
vault-blofin.com
verification-8547-google.com
verification-9515-tmobile.com
verification12589.com
verify294829.com
verify91358.com
verify91359.com
vortexhost.pro
walkerdunlopinternal.com
wallet-wealthsimple.com
wealthsimpleinternal.com
welltowerinternal.com
weworksso.com
zai.mcpcore.xyz
zapvps.com
ziffdavisinternal.com
zoominfosso.com

# Reference: https://x.com/t43cr0wl3r/status/2022495441774944276

http://38.69.12.23
http://91.202.4.68

# Reference: https://x.com/luc4m/status/2047950037229924561
# Reference: https://www.virustotal.com/gui/ip-address/37.72.140.17/relations
# Reference: https://urlscan.io/result/019c8af6-ac31-7619-82a1-d54921768408/

http://37.72.140.17
http://91.215.85.22
/pay_or_leak
/pay_or_leak/

# Reference: https://x.com/fbgwls245/status/2028070737354105194

lapsus.cz

# Reference: https://x.com/fbgwls245/status/2029185324149309694
# Reference: https://www.virustotal.com/gui/ip-address/95.129.236.208/relations

http://95.129.236.208
95.129.236.208:443
lapsus.by
api.lapsus.by
beta.lapsus.by
cdn.lapsus.by
ksro.lapsus.by
m.lapsus.by
uwu.lapsus.by

# Reference: https://www.virustotal.com/gui/ip-address/161.129.68.243/community

161.129.68.243:443

# Reference: https://x.com/0x534c/status/2033017122352398504
# Reference: https://reliaquest.com/blog/threat-spotlight-shinyhunters-fast-tracks-saas-access-subdomain-impersonation/acess-terms.com

desk-okta.com
lock-okta.com
okta.domains
okta.guide
passkeysetup.com
prod-okta.com
safe-okta.com
setup-okta.com
sso.guide
cbi.passkeysetup.com
stryker.passkeysetup.com
swinerton.passkeysetup.com

# Reference: https://x.com/AlvieriD/status/2039608629314064484

shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion

# Reference: https://x.com/AlvieriD/status/2049454663389331469

mwojud552brg7rl3obqjvv2funhwpg6acdsuuoeytq7365kmaeoi4gqd.onion
