Search results

1 report for “Also: office-token.com, IP 103.153.182.197; kit: HeartSender”

Searched by keyword.

HeartSender phishing kit still active, using office-panel.com and office-token.com panels

Sandbox company ANY.RUN posted on X on 10 November 2026 that it is tracking the HeartSender phishing kit, which shows Microsoft 365, Google and other branded fake sign-in pages, including Microsoft "device code" login…

office-panel.com
Also: office-token.com, IP 103.153.182.197; kit: HeartSender

Reported Nov 10, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.