domoarigato[.]aiDomain
Reported by 1 independent source · first reported by Red Canary · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user account“"Url": "hxxps://domoarigato[.]ai/"”
Indicators reported together
named in the same reports- 51.3.97[.]221in 1 report
- 5e98eabef5ea551db4e9daa0264515b4in 1 report
- 70.152.145[.]147in 1 report
- hxxps://domoarigato[.]ai/in 1 report
- hxxps://login.microsoftonline[.]com/$TargetEntraTenantID/oauth2/v2.0/tokenin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.