sharepoint.com

Domain

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 1, 2026

Last Seen

July 1, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

legitimate domain, not attacker infrastructure

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

Jul 1·44 sources

Related Articles (2)

EvilTokens device

Theregister·Jul 1

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

Blog.Talosintelligence·Jul 1

Related Entities

Phishing Cloudflare Outlook CWE-287 - Improper Authentication ARToken T1566.002 - Spearphishing Link T1071 - Application Layer Protocol SharePoint Microsoft 365 Cloudflare Workers GitHub React