Essential information

Value / Name

now-refer-several-tariff.trycloudflare.com

Confidence

100/100

Revoked

Yes

Valid from

17/06/2025 22:39

Valid until

23/05/2026 07:21

Pattern type

stix

Published

20/12/2025 19:56

Modified

23/05/2026 07:21

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'now-refer-several-tariff.trycloudflare.com']

Labels / Tags

Labels: asyncrat cloud services cloudflare tunnels cybercriminal donut packer endpoint evasion memory injection obfuscation phishing purehvnc python scripts python-based malware rat remcos remote access trojan revengerat shellcode loader stealth techniques trycloudflare venomrat webdav xworm

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.