URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	geetjewels.in
Domain registrar:	GoDaddy
Domain registration date:	2012-08-06 05:06:55 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:04 UTC
Total malware sites :	1
A record(s) observed :	86

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-08-01 08:01:52	15.197.148.33	a2aa9ff50de748dbe.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-08-01 08:01:52	3.33.130.190	a2aa9ff50de748dbe.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-05-23 11:26:23	92.113.23.186		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-05-25 22:33:20	92.113.16.123		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-05-28 09:41:46	92.113.16.91		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-06-29 20:58:51	92.113.16.120		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-06-07 16:45:16	92.113.16.65		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-04-27 09:17:57	92.113.16.131		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-05-19 00:42:35	92.113.23.159		Not listed	AS47583 AS-HOSTINGER	DE	no
2022-06-05 02:25:20	217.21.84.200		Not listed	AS47583 AS-HOSTINGER	IN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:15	https://geetjewels.in/zcd4ckp.rar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:26:25	8ec8ee1bb2facf00fafd37092824603322cfac95f03017a90d583bd64892c734	dll		Dridex
2021-10-14 14:52:42	aad11583e607a6ab73716edac5c21c48fa198fdcd01539d6d38e03ffe8977645	dll		Dridex
2021-10-14 07:21:39	6389ea94a79de7bf09c128d9fb8e69276bb611e636bd9bce7ace82e43ec2e369	dll		Dridex
2021-10-14 04:35:03	898df05e80266b99b3143cc0828dfedbe94245e3a53f5cd0dd110a01fa07b4d3	dll		Dridex
2021-10-13 19:54:04	5f8f5766388daeca62e343456c3de9e1c0c461bf2d227f21b370fbe303bb2a81	dll		Dridex
2021-10-13 19:00:29	f702c23e0d6a1f807653277a555e5743b883bdffcae32045ea24944099e69eba	dll		Dridex
2021-10-13 17:21:12	c4ba2f91bd439b1d2d5efc30f87d5717e8cb6ec9f8110a28ea1dd8ccc93297e5	dll		Dridex
2021-10-13 16:08:58	12ffd6ca58913913fd51e51f2db6805092e5265b846601f3399bc3402ebf9273	dll		Dridex
2021-10-13 15:03:37	f76c90a5708f67a3b24a5f28c134f027ce50e0cc4fba5f7445eb0c5ca14efc01	dll		Dridex
2021-10-13 14:32:55	efebca575770915e982ca2a9e5890314445b6207e700a51bd6347bf9ae91f4b2	dll		Dridex
2021-10-13 13:26:45	69b266a06229673e16bacf6fa94ffb8b4d8b662cec510d4c210c512d47a80327	dll		Dridex
2021-10-13 13:14:13	1c3f402651ec7acc0f84753b8a3913ec5b9abb7e0350fe4c88fce7b3ed364ec0	dll		Dridex