www.geosrt.com
Classification: Malicious
www.geosrt.com is a malicious hostname. Linked to Emotet malware. 6 sightings from 3 threat sources (Malicious url, Agent), last seen 2021-03-04.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 16:33:16.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 16:51:18 | 2025-05-12 01:00:27 | benign | |
| Malicious url | Cyber Threat Coalition | 2020-12-14 22:09:09 | 2021-03-04 17:34:57 | malicious-activity | |
| Agent | Hybrid-Analysis | 2020-12-30 14:15:13 | 2021-02-22 16:30:13 | ||
| Emotet | Abuse.ch | 2020-12-29 18:15:39 | 2020-12-29 18:15:39 | malicious-activity | S0367 Emotet |
| Covid19 scam | Cyber Threat Coalition | 2020-11-25 01:11:26 | 2020-12-13 22:31:44 | malicious-activity | |
| VB:Trojan.VBA.Agent | Hybrid-Analysis | 2020-10-17 11:00:10 | 2020-10-22 02:00:26 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-10-16 08:15:14 | 2020-10-16 11:30:20 |
Tags
covid19 coronavirus scam phishing emotetIP addresses resolved by this hostname
- 81.70.34.248 (2020-10-16 08:15:14)
- 104.21.16.1 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:5001 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:3001 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:2001 (2025-05-12 01:00:25)
- 104.21.32.1 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:1001 (2025-05-12 01:00:25)
- 104.21.48.1 (2025-05-12 01:00:25)
- 104.21.96.1 (2025-05-12 01:00:25)
- 104.21.80.1 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:6001 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:4001 (2025-05-12 01:00:25)
- 104.21.64.1 (2025-05-12 01:00:25)
- 2606:4700:3030::6815:7001 (2025-05-12 01:00:25)
- 104.21.112.1 (2025-05-12 01:00:25)
- 172.67.151.150 (2026-10-20 04:42:45)
- 104.21.64.147 (2026-10-20 04:42:45)
- 2606:4700:3031::6815:4093 (2026-10-29 16:40:24)
- 2606:4700:3035::ac43:9796 (2026-10-29 16:40:24)
- 172.64.80.1 (2026-11-06 16:33:16)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-11-06 16:33:16)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- geosrt.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- ARMANDO.NS.CLOUDFLARE.COM, INES.NS.CLOUDFLARE.COM, JIHOON.NS.CLOUDFLARE.COM, SHARON.NS.CLOUDFLARE.COM
- Registrant
- Gname.com Pte. Ltd.
- Address
- Redacted for privacy
- City
- Redacted for privacy
- State
- Redacted for privacy
- Country
- CN — China 🇨🇳
- Contact email
- [email protected]
- Domain created
- 2021-09-20 18:25:07
- Domain expires
- 2027-09-20 18:25:07
- First indexed
- 2020-10-16 08:15:14
- Last updated
- 2026-11-06 16:33:16