🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: codjikodsa.b-cdn.net
Domain registrar:Name.com -
Domain registration date:2016-04-25 23:34:57 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2024-01-17 18:33:05 UTC
Total malware sites :1
A record(s) observed :27

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-26 00:50:05 138.199.37.229138-199-37-229.bunnyinfra.netNot listedAS60068 CDN77- DEyes
2024-01-17 19:31:09 169.150.247.39169-150-247-39.bunnyinfra.netNot listedAS60068 CDN77- DEno
2025-06-14 01:29:08 169.150.247.40unn-169-150-247-40.datapacket.comNot listedAS60068 CDN77- DEno
2025-06-03 15:17:12 79.127.216.11179-127-216-111.bunnyinfra.netNot listedAS60068 CDN77- DEno
2024-01-17 19:50:47 169.150.247.38169-150-247-38.bunnyinfra.netNot listedAS60068 CDN77- DEno
2025-05-07 01:49:01 138.199.37.230138-199-37-230.bunnyinfra.netNot listedAS60068 CDN77- DEno
2025-05-09 03:33:19 138.199.36.8138-199-36-8.bunnyinfra.netNot listedAS60068 CDN77- DEno
2025-08-01 23:54:47 185.111.111.159185-111-111-159.bunnyinfra.netNot listedAS212238 CDNEXT- DEno
2025-05-26 04:03:45 138.199.36.7138-199-36-7.bunnyinfra.netNot listedAS60068 CDN77- DEno
2025-05-20 02:15:13 138.199.37.231138-199-37-231.bunnyinfra.netNot listedAS60068 CDN77- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-01-17 18:33:08https://codjikodsa.b-cdn.net/Mega_FullApp_Setup...OfflineKjGtqi Lumma ViaCrackSite lazyactivist192

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-01-17 18:33:08dc91b1ac776b4780ee4235b286cf9f695d308ed8de8a7c8b8d983cce0630c926zip