NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://84[.]200[.]33[.]163/302/302w
● IOC

hxxp://84[.]200[.]33[.]163/302/302w

View graph Watch Export
Type
URL
Sources
ThreatFoxURLhaus
First seen
Sep 30, 2026
Last seen
—
offlinepayload deliveryreported by anonymous
Look up on VirusTotal
Linked malware
shjsDPRKContagiousInterviewNodeJSContagiousDropgit-hookXCTDH
Related Indicators
6
urlhxxp://45[.]38[.]249[.]63/bbcsame malware familyurlhxxp://94[.]154[.]43[.]67/ohshit[.]shsame malware familyurlhxxp://176[.]65[.]139[.]132/c1same malware familyurlhxxp://176[.]65[.]139[.]132/c2same malware familyurlhxxp://176[.]65[.]139[.]132/d[.]shsame malware familyurlhxxp://176[.]65[.]139[.]131/phantom_bash[.]shsame malware family
Connections
8 relationships
sh
source
js
source
DPRK
source
ContagiousInterview
source
NodeJS
source
ContagiousDrop
source
git-hook
source
XCTDH
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon