Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Indicators http://127.0.0.1:9217/callback?code=1.ARsAIGLD9ki0FE63WmhS-KbgFENkvK5tmX

http://127.0.0.1:9217/callback?code=1.ARsAIGLD9ki0FE63WmhS-KbgFENkvK5tmX

TLP:CLEAR
Active

URL

Description

Extracted from web research on UTA0355. Source: https://www.volexity.com/blog/2025/04/22/phishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows/

Sightings (0)

No sightings recorded yet

Details

Name / Label
http://127.0.0.1:9217/callback?code=1.ARsAIGLD9ki0FE63WmhS-KbgFENkvK5tmX
Pattern Type
STIX
Confidence
50%
Valid From
Aug 9, 2026 00:34
Total Sightings
0
Added
Aug 9, 2026
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.

Record Sighting

Record an observation of http://127.0.0.1:9217/callback?code=1.ARsAIGLD9ki0FE63WmhS-KbgFENkvK5tmX

Sighting Type
Source
Comment
Leaving Threaticon

This link opens an external site that isn't part of the platform.