🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain idcool.codes.

Database Entry


IOC ID:1931148
IOC: idcool.codes
IOC Type :domain
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is high (90%)
Is compromised? : False
ASN:AS202412 OMEGATECH-AS
Country:- GB
First seen:2026-09-24 04:57:46 UTC
Last seen:2026-10-17 20:58:22 UTC
UUID:504978ce-b7b3-11f1-abee-42010aa4000a
Reporter sveinn
Reward 10 credits from raj_singh
Tags:ClearFake etherhiding

Avatar
sveinn
Replacement for entry-code-cdn.codes (same IP 178.16.52.101, Omegatech). Registered 2026-09-24 00:22 UTC; Polygon EtherHiding contract 0xB6bC9e1D0b2fB96Ab7C47E04Cb0BE477410bC1f2 (method 0xb68d1809) switched to https://idcool.codes by 0xCaf2C54E400437da717cF215181B170F65187aBf. Loaded by compromised WordPress sites in Iceland. Verifiable by read-only eth_call; host not contacted.