URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	developer.codencil.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-02-10 13:16:03 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	25

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 14:40:40	173.255.194.134	li204-134.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	96.126.123.244	li372-244.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	72.14.185.43	li51-43.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	72.14.178.174	li40-174.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.79.19.196	li1118-196.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.56.79.23	li929-23.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.33.30.197	li1047-197.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.33.23.183	li977-183.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.33.20.235	li974-235.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 14:40:40	45.33.2.79	li956-79.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-02-10 14:10:33	http://developer.codencil.com/gicjli.zip	Offline	Dridex	reecdeep
2021-02-10 13:16:12	https://developer.codencil.com/gicjli.zip	Offline	Dridex	stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-02-11 04:52:30	e63419700590e021c61e68cfaccfbe5be4f31aba7fdf703d323c8b14365658e5	exe	Dridex
2021-02-11 04:49:01	e63419700590e021c61e68cfaccfbe5be4f31aba7fdf703d323c8b14365658e5	exe	Dridex
2021-02-11 03:33:01	4c6fa20aa8826ba525878040233265b698d92205eefbe9b41acbd629c1b9e174	dll	Dridex
2021-02-11 03:32:39	4c6fa20aa8826ba525878040233265b698d92205eefbe9b41acbd629c1b9e174	dll	Dridex
2021-02-10 20:00:42	73fbb95d1e421e7d51249d5c518fa15205bd2c297d8763eae830cf3a2ed80323	dll	Dridex
2021-02-10 19:19:26	73fbb95d1e421e7d51249d5c518fa15205bd2c297d8763eae830cf3a2ed80323	dll	Dridex
2021-02-10 15:01:33	4fca8c7c2bc5fe96e8dbaf818216e9f6990303f646d5b07490b58ce151f4b4fd	dll	Dridex
2021-02-10 14:58:21	4fca8c7c2bc5fe96e8dbaf818216e9f6990303f646d5b07490b58ce151f4b4fd	dll	Dridex
2021-02-10 14:10:33	33b91e977a00e51d468fa76278f66735cf0c250d0f0f5e6936f78b0b65a40b29	dll	Dridex
2021-02-10 13:16:11	33b91e977a00e51d468fa76278f66735cf0c250d0f0f5e6936f78b0b65a40b29	dll	Dridex