Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
hxxps[://]onedrivedownload.zoholandingpage.com/my-workspace/downloadedonedrive · URL · cyfar.ca
indicator
url
hxxps[://]onedrivedownload[.]zoholandingpage[.]com/my-workspace/DownloadedOneDrive
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Intelligence Center
Cisco Talos
External host URL used to download the malicious payload after CAPTCHA completion.
2026-05-13
