T1016
System Network Configuration Discovery
discovered 2026-07-13Resolves the installing host public egress IP by requesting Cloudflare /cdn-cgi/trace with a spoofed desktop-browser User-Agent to bypass bot challenges.
View on MITRE ATT&CKSeen in packages
- npm @flex-ng/error-componentuses
- npm @flex-ng/filter-pipeuses
- npm @flex-ng/header-componentuses
- npm @idms-corp/auth-uiuses
- npm @logdna-web/shareduses
- npm @logdna-web/stylesuses
- npm tme-xcauses
- npm tme-xca-reactuses
- npm tme-erroruses
- npm enbd-react-loggeruses
- npm enbd-react-error-boundryuses
- npm enbd-react-libuses
- npm box-react-uixuses
- npm sams-sr-sdk-h5uses
- npm chat-adapter-zoomuses
- npm salesforce-vscode-sldsuses
- npm slds-lsp-clientuses
