NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxp://84[.]200[.]33[.]163/302/302w
● IOC
hxxp://84[.]200[.]33[.]163/302/302w
View graph
Watch
Export
Type
URL
Sources
ThreatFox
URLhaus
First seen
Sep 30, 2026
Last seen
—
offline
payload delivery
reported by
anonymous
Look up on VirusTotal
Linked malware
sh
js
DPRK
ContagiousInterview
NodeJS
ContagiousDrop
git-hook
XCTDH
Related Indicators
6
url
hxxp://45[.]38[.]249[.]63/bbc
same malware family
url
hxxp://94[.]154[.]43[.]67/ohshit[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]132/c1
same malware family
url
hxxp://176[.]65[.]139[.]132/c2
same malware family
url
hxxp://176[.]65[.]139[.]132/d[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]131/phantom_bash[.]sh
same malware family
Connections
8 relationships
Indicates
8
sh
source
js
source
DPRK
source
ContagiousInterview
source
NodeJS
source
ContagiousDrop
source
git-hook
source
XCTDH
source