# TA2552 IOCs - Domains & Hosts # https://www.proofpoint.com/us/blog/threat-insight/ta2552-uses-oauth-access-token-phishing-exploit-read-only-risks # Source: https://otx.alienvault.com/user/343GuiltySpark/pulses # # UPDATED: 04-02-2021 # # Every link reported should be considered harmefull and could result in an unwanted malware download. Use this file carrefully. # # **** Therefor my advice is **** # **** If you experience sites that are being blocked **** # **** please double check your input in search field and **** # **** see if it's correct and verify that it is the correct page you **** # **** are going too! If it is correct then whitelist that site **** # # USE THIS LIST WITH CAUTION! # # # *****The list is released without any warranty to the end users.***** # # *** This list contains domains and hosts *** # ******************************************************************************************************************************************************************* # TA2552 Uses OAuth Access Token Phishing to Exploit Read-Only Risks # Source: https://otx.alienvault.com/pulse/5f74a49bc85684b52d86ea23 # Domains 16720s.xyz akglass.in al-thawiya.com calyss.in casperinfosystem.com ccgdm.org e1920.xyz e10220.com e29120.com e180320.xyz ex171019.com i5320.xyz mucla.in nivedafoundation.org photobalkan.com printstockphoto.com r25820.xyz rr020920.xyz ultimatetravel.in xs1920.xyz # Hosts 0.0.0.0 485online.rs10720.xyz 0.0.0.0 app452-sat-mx.i3720.xyz 0.0.0.0 apps-registros-mx.is15720.xyz 0.0.0.0 dev.tvs.st 0.0.0.0 www-netfflix-registros.i10720.xyz 0.0.0.0 www-registros-apps-mx.e18220.com 0.0.0.0 www-registros-appsmx-sat.x030720.xyz