# PhishDestroy domain threat record: geometrydashe.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/geometrydashe.com/
Machine-readable companion: https://phishdestroy.io/domain/geometrydashe.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 01:41:49 UTC
- Last availability or vendor check: 2026-10-23 02:22:05 UTC
- Stored record updated: 2026-10-23 06:21:45 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.145.128
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, geometrydashe.com): 2026-07-27 14:31:43 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1668e-cbea-745d-b1ae-1048a05f5cdd/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/geometrydashe.com
- Certificate Transparency search: https://crt.sh/?q=%25.geometrydashe.com
- Web Archive lookup: https://web.archive.org/web/*/https://geometrydashe.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because it impersonates the Geometry Dash brand and advertises a downloadable APK, a common vector for malware. The domain was first seen by PhishDestroy on 2026-10-23, 88 days after its registration on 2026-07-27. The recorded page title reads “Geometry Dash APK v2.214 Descargar Versión 2026” and the excerpt claims a “100% safe and verified” APK. An HTTP 200 response was recorded on the same date.

How the scam works
In this type of scheme attackers create a page that mimics a popular game or app, display fake security badges, and offer a direct download of an APK that appears legitimate. Users are enticed to install the file, which may contain malware, adware, or unwanted permissions, allowing the attacker to compromise the device or harvest data. The brand name is used solely to increase trust, not because the operator is affiliated with the genuine developer.

Evidence
The prior PhishDestroy assessment flagged the domain for brand impersonation and malicious download risk. VirusTotal scanned the domain on 2026-10-23 and reported 0 detections from 92 engines. Google Safe Browsing checked on the same day and did not flag the URL. URLScan captured the page on 2026-10-21; its overall verdict was clean, but its engine analysis marked it malicious with a 97 score. Cloudflare Radar labeled the site as phishing. No external blocklists or OTX pulses listed the domain, and PhishDestroy’s internal blocklist contains it.

Infrastructure
The domain was registered with Spaceship, Inc. on 2026-07-27 and is hosted behind Cloudflare’s network, resolving to IP addresses 104.21.95.147 (CA) and 172.67.145.128. TLS was provided by Google Trust Services, valid from 2026-09-24 to 2026-12-23. No additional infrastructure details beyond the recorded DNS records and CDN hosting are available.

What to do
Do not download or install the advertised APK; if it has already been installed, run reputable anti‑malware software and consider reinstalling the official app from a trusted store. Organizations should block geometrydashe.com at the DNS or proxy level and monitor logs for any connections to the listed IPs. Users who entered credentials on the site should change those passwords, as the page was assessed as a phishing impersonation.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15d1c-7ed9-76cf-930b-1cc0f94dc2e9/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a24fef9f-3a59-4efe-8470-c56654894f22
Stored capture screenshot: https://urlscan.io/screenshots/01a15d1c-7ed9-76cf-930b-1cc0f94dc2e9.png
Cloudflare Radar screenshot (2026-10-23T02:03:09Z): https://screenshots.phishdestroy.io/cf/a24fef9f-3a59-4efe-8470-c56654894f22.png
URLScan screenshot (2026-10-17T14:34:39Z): https://screenshots.phishdestroy.io/us/01a14a49-2c93-71a6-bc64-d7c597b18b81.png
URLScan capture report: https://urlscan.io/result/01a14a49-2c93-71a6-bc64-d7c597b18b81/
URLScan screenshot (2026-10-17T21:11:06Z): https://screenshots.phishdestroy.io/us/01a14bb4-2856-748c-a6bf-5b231daceff4.png
URLScan capture report: https://urlscan.io/result/01a14bb4-2856-748c-a6bf-5b231daceff4/
VirusTotal report: https://www.virustotal.com/gui/domain/geometrydashe.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=geometrydashe.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 02:09:16 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1668e-cbea-745d-b1ae-1048a05f5cdd.png
  Captured: 2026-10-23 02:22:05 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a15d1c-7ed9-76cf-930b-1cc0f94dc2e9.png
  Captured: 2026-10-23 01:41:49 UTC
  Source report: https://urlscan.io/result/01a1668e-cbea-745d-b1ae-1048a05f5cdd/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a24fef9f-3a59-4efe-8470-c56654894f22.png
  Captured: 2026-10-23 02:03:09 UTC
  Source report: https://radar.cloudflare.com/scan/a24fef9f-3a59-4efe-8470-c56654894f22
  SHA-256: 344446f9a72f64001e1769cbf0b1c92684e0ab05bfb76918787b6a1f7d2233f5
- URLQuery: https://screenshots.phishdestroy.io/uq/35b07a8c-b17c-435b-ae4f-ba37dfd5ca2e.png
  Source report: https://urlquery.net/report/35b07a8c-b17c-435b-ae4f-ba37dfd5ca2e
  SHA-256: 538ff853b92a71f3be673d5bdedf600ff32df4605c761dc9ae11da89f4ce6cfb
- URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14a49-2c93-71a6-bc64-d7c597b18b81.png
  Captured: 2026-10-17 14:34:39 UTC
  Source report: https://urlscan.io/result/01a14a49-2c93-71a6-bc64-d7c597b18b81/
  SHA-256: 20463654eb191f1e10809b8313b2e545672debcbc26c3fc21cad807db5062673
- URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14bb4-2856-748c-a6bf-5b231daceff4.png
  Captured: 2026-10-17 21:11:06 UTC
  Source report: https://urlscan.io/result/01a14bb4-2856-748c-a6bf-5b231daceff4/
  SHA-256: 20463654eb191f1e10809b8313b2e545672debcbc26c3fc21cad807db5062673
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15d1c-7ed9-76cf-930b-1cc0f94dc2e9.png
  Captured: 2026-10-21 06:18:47 UTC
  Source report: https://urlscan.io/result/01a15d1c-7ed9-76cf-930b-1cc0f94dc2e9/
  SHA-256: 9928235093f4c05cdcefc5b3dbf42d9fc4e0eb689f605f4fcf87dd8c60ca314d
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1669a-98ac-734a-99d9-cfc2bf4037a7.png
  Captured: 2026-10-23 02:32:59 UTC
  Source report: https://urlscan.io/result/01a1669a-98ac-734a-99d9-cfc2bf4037a7/
  SHA-256: 8d79abd502374a1b0921bd97559898739a5f4200dace0a2b9cf0ef6a4fbb99b2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T03:26:16Z",
        "uuid": "01a1668e-cbea-745d-b1ae-1048a05f5cdd",
        "scanned_at": "2026-10-23T02:20:02Z",
        "final_url": "https://geometrydashe.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://geometrydashe.com/",
                "from": "http://geometrydashe.com/",
                "status": 307
            }
        ],
        "ip": "104.21.95.147",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com",
            "maxcdn.bootstrapcdn.com"
        ],
        "ips": [
            "142.251.13.94",
            "142.251.20.95",
            "104.18.10.207",
            "104.21.95.147"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "5bbde4f22958ca45c13b87b912f2c3a527a8c1902568ff6ad1edabe0f5932540",
        "globals": [
            "lang_toggler",
            "show_menu_mob",
            "hide_menu_mob",
            "stickyWrapper",
            "footer",
            "scrollToi",
            "scrollToc",
            "share_this",
            "scrollFunction"
        ],
        "tls": {
            "san": [
                "geometrydashe.com",
                "*.geometrydashe.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "geometrydashe.com",
            "protocol": "QUIC",
            "valid_to": "2026-12-23T15:59:18Z",
            "valid_from": "2026-09-24T15:01:36Z"
        },
        "domain_age_days": 704,
        "apex_age_days": 704,
        "tls_age_days": 28,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T02:08:28Z",
        "uuid": "a24fef9f-3a59-4efe-8470-c56654894f22",
        "scanned_at": "2026-10-23T02:03:09Z",
        "final_url": "https://geometrydashe.com/",
        "status": 200,
        "history": [
            {
                "url": "https://geometrydashe.com/",
                "status": 200
            }
        ],
        "dom_hash": "78e5a57e807ed521cadb9db0212d1e0f13ff23c916884f1c90306fade535ff71",
        "doc_hash": "537f764a3e2eaf447918d2f615a56cf2d43218782179d0cff1830e5bc909f21b",
        "phishing_v2": [
            "phishing"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "geometrydashe.com",
                "type": "A",
                "value": "172.67.145.128"
            },
            {
                "name": "geometrydashe.com",
                "type": "A",
                "value": "104.21.95.147"
            },
            {
                "name": "geometrydashe.com",
                "type": "AAAA",
                "value": "2606:4700:3031::6815:5f93"
            },
            {
                "name": "geometrydashe.com",
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:9180"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.145.128",
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-07-27T14:31:43Z",
            "updated": "2026-07-27T15:17:38Z",
            "expires": "2027-07-27T14:31:43Z",
            "nameservers": [
                "abby.ns.cloudflare.com",
                "steven.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T02:02:03Z",
        "analysis_at": "2026-10-17T15:58:11Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 38
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-07-27T14:31:43Z",
        "expires": "2027-07-27T14:31:43Z",
        "updated": "2026-07-27T15:17:38Z",
        "first_seen": "2024-11-17T08:28:09Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "abby.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "abby.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.95.147"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.145.128"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:9180"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:5f93"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "steven.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-17T15:58:27Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "geometrydashe.com",
                "*.geometrydashe.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "5092a42bf05a4cc1130bbe6a94428c9",
            "sha256": "875c47b2a91b280f4bc57f3c8b8b35ca3443379f706bca214cbb74765a8c9150",
            "subject": "geometrydashe.com",
            "valid_to": "2026-12-23T15:59:18Z",
            "valid_from": "2026-09-24T15:01:36Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "http://www.spaceship.com",
            "created": "2026-07-27T14:31:43Z",
            "updated": "2026-07-27T15:17:38Z",
            "expires": "2027-07-27T14:31:43Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "abby.ns.cloudflare.com",
                "steven.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-23T09:17:45Z",
                "registration": "2026-07-27T14:31:43Z",
                "registrar expiration": "2027-07-27T14:31:43Z",
                "last update of RDAP database": "2026-10-15T21:16:21Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T02:08:47Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "geometrydashe.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T01:51:19Z",
            "first": "2024-11-17T08:13:56Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0,
            "avg_page_bytes": 8370
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://geometrydashe.com/sitemap_index.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 13
        },
        "social_tags": {
            "ogUrl": "https://geometrydashe.com/",
            "title": "Geometry Dash APK v2.214 Descargar Versión 2026",
            "ogType": "website",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "ogTitle": "Geometry Dash APK v2.214 Descargar Versión 2026",
            "ogSiteName": "Geometry Dash APK",
            "description": "Geometry Dash APK ofrece un juego rápido y adictivo donde saltas y esquivas obstáculos al ritmo de la música. Descárgalo ahora y pon a prueba tus reflejos",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://geometrydashe.com/",
            "ogDescription": "Geometry Dash APK ofrece un juego rápido y adictivo donde saltas y esquivas obstáculos al ritmo de la música. Descárgalo ahora y pon a prueba tus reflejos"
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Bootstrap CDN",
                    "company": "BootstrapCDN",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 40,
                "tls": 45,
                "wait": 959,
                "connect": 29,
                "download": 1
            },
            "response_ms": 1074
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 68568,
            "co2_grams": 0.0025,
            "cleaner_than": 30
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.17",
                    "host": "steven.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.100",
                    "host": "abby.ns.cloudflare.com"
                }
            ],
            "zone": "geometrydashe.com"
        },
        "location": {
            "ip": "2606:4700:3031::6815:5f93",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "geometrydashe.com"
        },
        "dns": {
            "A": [
                "104.21.95.147",
                "172.67.145.128"
            ],
            "NS": [
                "steven.ns.cloudflare.com",
                "abby.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"abby.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415751407, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3031::6815:5f93",
                "2606:4700:3032::ac43:9180"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3032::ac43:9180",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://geometrydashe.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.geometrydashe.com"
            ]
        },
        "linked_pages": {
            "internal_count": 13
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-07-27T14:31:43Z",
            "updated": "2026-07-27T15:17:38Z",
            "expires": "2027-07-27T14:31:43Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "abby.ns.cloudflare.com",
                "steven.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```