hxxps://login.microsoftonline[.]com/common/oauth2/v2.0/tokenURL

Reported by 1 independent source · first reported 18 Dec 2025 by ESET WeLiveSecurity · last reported 18 Dec 2025

Last reported 10 months ago

What the reports say

1 report, newest first · the exact sentence from each

“"TokenUrl": "hxxps://login.microsoftonline[.]com/common/oauth2/v2.0/token",”

ESET WeLiveSecurityVendor18 Dec 2025
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

Indicators reported together

named in the same reports

dev0-411506.iam.gserviceaccount[.]comin 1 report
hxxps://accounts.google[.]com/o/oauth2/authin 1 report
hxxps://oauth2.googleapis[.]com/tokenin 1 report
hxxps://www.googleapis[.]com/oauth2/v1/certsin 1 report
hxxps://www.googleapis[.]com/robot/v1/metadata/x509/dev0-660%40dev0-411506.iam.gserviceaccount.comin 1 report
d53fcc01038e2019…6b000ebd8b1cin 1 report
118.107.234[.]29in 1 report
4e3f6e9d0f443f4c…e957b498da3din 1 report

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

dev0-411506.iam.gserviceaccount[.]com
hxxps://accounts.google[.]com/o/oauth2/auth
hxxps://oauth2.googleapis[.]com/token
hxxps://www.googleapis[.]com/oauth2/v1/certs
hxxps://www.googleapis[.]com/robot/v1/metadata/x509/dev0-660%40dev0-411506.iam.gserviceaccount.com
d53fcc01038e20193fbd51b7400075cf7c9c4402b73da7b0db836b000ebd8b1c
118.107.234[.]29
4e3f6e9d0f443f4c42974a0551eee957b498da3d

Thanks — we review every report.

Report a wrong value