{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/unc6671-helpdesk-vishing-cloud-data-theft/",
    "fang": "live",
    "exported_at": "2026-08-10T15:05:30Z",
    "total": 166,
    "categories": 3
  },
  "iocs": {
    "IPv4": [
      "107.128.45.122",
      "185.178.208.153",
      "193.34.212.132",
      "195.140.213.114",
      "195.140.213.115",
      "23.234.75.84",
      "31.7.56.52",
      "31.7.56.61",
      "38.42.59.171",
      "47.218.103.146",
      "76.103.148.180"
    ],
    "Domains": [
      "0811A9866E.com",
      "Pipe.ma",
      "PublicDomainRegistry.com",
      "activatemypasskey.com",
      "activatepasskey.com",
      "activatepasskeyportal.com",
      "add-passkey.com",
      "addmypasskey.com",
      "addoktapasskey.com",
      "addpasskey2fa.com",
      "addssopasskey.com",
      "addyourpasskey.com",
      "assignpasskey.com",
      "checkpasskey.com",
      "createmfa.com",
      "createmypasskey.com",
      "createpasskey.com",
      "createssopasskey.com",
      "deploypasskey.com",
      "enablepasskey.com",
      "enablepasskey2fa.com",
      "enrollpasskey.com",
      "hubpasskey.com",
      "idokta.com",
      "keyokta.com",
      "keysyncos.com",
      "makepasskey.com",
      "mspasskey.com",
      "myaccountsecurity.com",
      "myconnectkey.com",
      "mynewpasskey.com",
      "myoktasso.com",
      "mypasskeyid.com",
      "mypasskeysso.com",
      "mysecurepasskey.com",
      "myssopasskey.com",
      "newpasskey.com",
      "oktaenroll.com",
      "oktaportalsso.com",
      "oskeyconnect.com",
      "oskeysync.com",
      "passkey-check.com",
      "passkey-connect.com",
      "passkey-enable.com",
      "passkey-portal.com",
      "passkey-setup.com",
      "passkeyactivation.com",
      "passkeyadd.com",
      "passkeycenter.com",
      "passkeycreate.com",
      "passkeycreator.com",
      "passkeydeploy.com",
      "passkeyenable.com",
      "passkeyenroll.com",
      "passkeyhelpdesk.com",
      "passkeymfa.com",
      "passkeyms.com",
      "passkeyokta.com",
      "passkeyportal.com",
      "passkeyportalsetup.com",
      "passkeyregister.com",
      "passkeyregistration.com",
      "passkeyrollout.com",
      "passkeyset.com",
      "passkeystatus.com",
      "passkeysupport.com",
      "passkeyuser.com",
      "portalpasskey.com",
      "portalsetuphub.com",
      "registerpasskey.com",
      "secure-passkey.com",
      "secureauthpasskey.com",
      "setpasskey.com",
      "setupsso.com",
      "setupssopasskey.com",
      "sqfepjvmrd.xyz",
      "ssopasskey.com",
      "startpasskey.com",
      "startpasskeysetup.com"
    ],
    "URLs": [
      "activatemypasskey.com",
      "activatepasskey.com",
      "activatepasskeyportal.com",
      "add-passkey.com",
      "addmypasskey.com",
      "addoktapasskey.com",
      "addpasskey2fa.com",
      "addssopasskey.com",
      "addyourpasskey.com",
      "assignpasskey.com",
      "checkpasskey.com",
      "createmfa.com",
      "createmypasskey.com",
      "createpasskey.com",
      "createssopasskey.com",
      "deploypasskey.com",
      "enablepasskey.com",
      "enablepasskey2fa.com",
      "enrollpasskey.com",
      "hubpasskey.com",
      "idokta.com",
      "keyokta.com",
      "keysyncos.com",
      "makepasskey.com",
      "mspasskey.com",
      "myaccountsecurity.com",
      "myconnectkey.com",
      "mynewpasskey.com",
      "myoktasso.com",
      "mypasskeyid.com",
      "mypasskeysso.com",
      "mysecurepasskey.com",
      "myssopasskey.com",
      "newpasskey.com",
      "oktaenroll.com",
      "oktaportalsso.com",
      "oskeyconnect.com",
      "oskeysync.com",
      "passkey-check.com",
      "passkey-connect.com",
      "passkey-enable.com",
      "passkey-portal.com",
      "passkey-setup.com",
      "passkeyactivation.com",
      "passkeyadd.com",
      "passkeycenter.com",
      "passkeycreate.com",
      "passkeycreator.com",
      "passkeydeploy.com",
      "passkeyenable.com",
      "passkeyenroll.com",
      "passkeyhelpdesk.com",
      "passkeymfa.com",
      "passkeyms.com",
      "passkeyokta.com",
      "passkeyportal.com",
      "passkeyportalsetup.com",
      "passkeyregister.com",
      "passkeyregistration.com",
      "passkeyrollout.com",
      "passkeyset.com",
      "passkeystatus.com",
      "passkeysupport.com",
      "passkeyuser.com",
      "portalpasskey.com",
      "portalsetuphub.com",
      "registerpasskey.com",
      "secure-passkey.com",
      "secureauthpasskey.com",
      "setpasskey.com",
      "setupsso.com",
      "setupssopasskey.com",
      "sqfepjvmrd.xyz",
      "ssopasskey.com",
      "startpasskey.com",
      "startpasskeysetup.com"
    ]
  }
}