api.trycloudflare[.]comDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Living off the coding agent: Two tales of tunnels and LaunchAgents“…use tools in this window include localhost.run (free SSH tunnels on *.lhr.life), Cloudflare Quick Tunnels (*.trycloudflare.com / api.trycloudflare[.]com), and an ngrok binary.”
Indicators reported together
named in the same reports- localhost[.]runin 1 report
- lhr[.]lifein 1 report
- alocalhost[.]runin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.