hxxps://domoarigato[.]ai/URL

Reported by 1 independent source · first reported 1 Jun 2026 by Red Canary · last reported 1 Jun 2026

Last reported 4 months ago

What the reports say

1 report, newest first · the exact sentence from each

“"Url": "hxxps://domoarigato[.]ai/"”

Red CanaryVendor1 Jun 2026
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user account

Indicators reported together

named in the same reports

51.3.97[.]221in 1 report
5e98eabef5ea551db4e9daa0264515b4in 1 report
70.152.145[.]147in 1 report
domoarigato[.]aiin 1 report
hxxps://login.microsoftonline[.]com/$TargetEntraTenantID/oauth2/v2.0/tokenin 1 report

Copy these 5 indicators · defanged

5 indicators, defanged, one per line

51.3.97[.]221
5e98eabef5ea551db4e9daa0264515b4
70.152.145[.]147
domoarigato[.]ai
hxxps://login.microsoftonline[.]com/$TargetEntraTenantID/oauth2/v2.0/token

Thanks — we review every report.

Report a wrong value