NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://176[.]65[.]139[.]131/phantom_bins/phantom[.]arm
● IOC

hxxp://176[.]65[.]139[.]131/phantom_bins/phantom[.]arm

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Aug 14, 2026
Last seen
—
offlinemalware downloadreported by BlinkzSec
Look up on VirusTotal
Linked malware
ua-wgetgeofencedDEU176-65-139-131
Related Indicators
6
urlhxxp://62[.]60[.]249[.]165/main_x86same malware familyurlhxxp://62[.]60[.]249[.]165/main_mipssame malware familyurlhxxp://62[.]60[.]249[.]165/main_x86_64same malware familyurlhxxp://62[.]60[.]249[.]165/main_mpslsame malware familyurlhxxp://62[.]60[.]249[.]165/main_armsame malware familyurlhxxp://62[.]60[.]249[.]165/main_sh4same malware family
Connections
4 relationships
ua-wget
source
geofenced
source
DEU
source
176-65-139-131
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon