NEXUS8
by 8bitsecurity
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
Signal
Radar
IOCs
Watchlist
Sign in
Premium
Search
/
hxxps://journeylake11[.]com/curl/fh3ddf2xv6k/hilhg0wgie4tsjo9vi[.]txt
● IOC
hxxps://journeylake11[.]com/curl/fh3ddf2xv6k/hilhg0wgie4tsjo9vi[.]txt
View graph
Watch
Export
Type
URL
Sources
URLhaus
ThreatFox
First seen
Sep 23, 2026
Last seen
—
offline
malware download
reported by
zeevox
Look up on VirusTotal
Linked malware
sh
AMOS
ClickFix
zsh
ClearFake
Related Indicators
6
url
hxxp://45[.]38[.]249[.]63/bbc
same malware family
url
hxxp://94[.]154[.]43[.]67/ohshit[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]132/c1
same malware family
url
hxxp://176[.]65[.]139[.]132/c2
same malware family
url
hxxp://176[.]65[.]139[.]132/d[.]sh
same malware family
url
hxxp://176[.]65[.]139[.]131/phantom_bash[.]sh
same malware family
Connections
5 relationships
Indicates
5
sh
source
AMOS
source
ClickFix
source
zsh
source
ClearFake
source