file://contrast-shade-revelation-policies[.]trycloudflare[.]com@SSL/DavWWWRoot/pq

Posts referencing this indicator

• The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution

  Cofense

  Decoded WebDAV path embedded within a malicious URL shortcut file to retrieve subsequent payloads.

  2026-05-13