NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://23[.]254[.]195[.]48:8099/exp[.]so
● IOC

hxxp://23[.]254[.]195[.]48:8099/exp[.]so

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Oct 7, 2026
Last seen
—
onlinemalware downloadreported by BlinkzSec
Look up on VirusTotal
Linked malware
ua-wgetkinsing23-254-195-48-8099
Related Indicators
6
urlhxxp://62[.]60[.]249[.]165/main_x86same malware familyurlhxxp://62[.]60[.]249[.]165/main_mipssame malware familyurlhxxp://62[.]60[.]249[.]165/main_x86_64same malware familyurlhxxp://62[.]60[.]249[.]165/main_mpslsame malware familyurlhxxp://62[.]60[.]249[.]165/main_armsame malware familyurlhxxp://62[.]60[.]249[.]165/main_sh4same malware family
Connections
3 relationships
ua-wget
source
kinsing
source
23-254-195-48-8099
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon