NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxps://xhbgt[.]nextbahis[.]blog/14712a3f-82a5-450a-8965-25d6f3f5f047
● IOC
hxxps://xhbgt[.]nextbahis[.]blog/14712a3f-82a5-450a-8965-25d6f3f5f047
View graph
Watch
Export
Type
URL
Source
URLhaus
First seen
Jul 20, 2026
Last seen
—
offline
malware download
reported by
anonymous
Look up on VirusTotal
Linked malware
windows
ClearFake
win-0x4679
Related Indicators
6
url
hxxp://85[.]120[.]255[.]252:8000/csharp[.]exe
same malware family
url
hxxps://gbgl[.]kafekarachi[.]com/c40723f4-afe3-4387-a5f0-30ad263a13f0
same malware family
url
hxxps://qbmuv[.]loganlooneyresume[.]com/becf487a-8807-4073-8b1e-228ae74750cb
same malware family
url
hxxps://tmnpc[.]lnlsealcoating[.]com/6066c921-0fcc-466e-bf63-fa48e3fccad7
same malware family
url
hxxps://7wzfqmf9[.]behtarin-site-shartbandi[.]com/?ublib=d8041874-6dcf-44fd-9b89-39d9d0470ace
same malware family
url
hxxps://ynwe[.]jetourmexico[.]com/6f3e5baf-84aa-4952-a834-2615f584986a
same malware family
Connections
3 relationships
Indicates
3
windows
source
ClearFake
source
win-0x4679
source