domain

recorded-distinct-face-girlfriend.trycloudflare.com

discovered 2026-06-01

Epsilon Stealer exfil API tunnel. Endpoints: /customer (registration), /upload (file exfil), /discord-token (Discord token exfil), /clip (clipboard data).

Campaigns

Epsilon Axios Typosquat Campaignattributed-to

Linked packages

npm faster-axiosexfiltrates-to