indicatorurl
mines.cloudapi.stream/auth_google
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- 108 Chrome Extensions Linked to Data Exfiltration and Session Theft via Shared C2 Infrastructure
Endpoint used for harvesting stolen Google OAuth2 identity data.