Search/hxxps://zanderrealestate[.]com/curl/85cb26206d920216eee0c5f67e8de516b4d55bd1752025bb3c08a069a44fdbdf
● IOC

hxxps://zanderrealestate[.]com/curl/85cb26206d920216eee0c5f67e8de516b4d55bd1752025bb3c08a069a44fdbdf

View graph Watch Export
Type
URL
Sources
ThreatFoxURLhaus
First seen
Sep 22, 2026
Last seen
—
offlinepayload deliveryreported by c4ffeine
Look up on VirusTotal
Linked malware
stealermacosClickFixzshMacSyncUnstoppableDomainszsh-stage1token-85cb2620
Related Indicators
6
urlhxxps://www[.]dropbox[.]com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod[.]exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1same malware familyurlhxxps://www[.]dropbox[.]com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup[.]exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1same malware familyurlhxxp://192[.]162[.]199[.]249/8jot5vdohds0imt4same malware familyurlhxxp://192[.]162[.]199[.]249/1vo6lm4y50k3ww0fsame malware familyurlhxxp://192[.]162[.]199[.]249/zeb8cgwmkkpvu7pcsame malware familyurlhxxp://192[.]162[.]199[.]249/1edjop4tlj2dsame malware family
Connections
8 relationships