Indicator of Compromise
passkeyadd[.]com
A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.
Included in the Domains feed (live, machine-readable).
Seen in these reports
General CTI · Aug 24, 2026
Apollo Breach Shows Why Helpdesk Vishing Is a Cloud-Control Problem
Cyber Security Blog · Aug 10, 2026
UNC6671 Shows Why Helpdesk Vishing Is a Cloud Data-Theft Problem
Cyber Security Blog · Jun 6, 2026
Pink Extortion Shows Microsoft 365 Defense Starts With Vishing Controls
Related indicators
Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.
185[.]178[.]208[.]153 deploypasskey[.]com passkeydeploy[.]com 107[.]128[.]45[.]122 193[.]34[.]212[.]132 195[.]140[.]213[.]114 195[.]140[.]213[.]115 23[.]234[.]75[.]84 31[.]7[.]56[.]52 31[.]7[.]56[.]61 38[.]42[.]59[.]171 47[.]218[.]103[.]146 76[.]103[.]148[.]180 activatemypasskey[.]com activatepasskey[.]com activatepasskeyportal[.]com add-passkey[.]com addmypasskey[.]com addoktapasskey[.]com addpasskey2fa[.]com addssopasskey[.]com addyourpasskey[.]com assignpasskey[.]com createmfa[.]com createmypasskey[.]com createpasskey[.]com createssopasskey[.]com enablepasskey[.]com enablepasskey2fa[.]com enrollpasskey[.]com hubpasskey[.]com idokta[.]com keyokta[.]com keysyncos[.]com makepasskey[.]com mspasskey[.]com myaccountsecurity[.]com mynewpasskey[.]com myoktasso[.]com mypasskeyid[.]com