indicatorurl
/api/device/status/
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- New widespread EvilTokens kit: device code phishing as-a-service – Part 1
EvilTokens backend API endpoint polled by the phishing page to check authentication status.