Domain > gems.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-03-29	172.67.70.229 (ClassC)
2024-11-10	104.26.6.187 (ClassC)
2024-12-27	104.26.7.187 (ClassC)
2025-01-15	104.21.48.1 (ClassC)
2025-08-09	99.84.66.50 (ClassC)
2025-08-12	99.84.66.10 (ClassC)
2025-08-19	52.84.162.6 (ClassC)
2025-08-23	52.84.162.54 (ClassC)
2025-09-14	99.84.66.88 (ClassC)
2025-09-17	99.84.66.78 (ClassC)
2025-10-18	3.163.24.121 (ClassC)

HTTP/1.1 200 OKDate: Sun, 10 Nov 2024 03:43:10 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveContent-Disposition: inline; filenameindex.htmlVary: Accept-Encod

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1/>meta nametheme-color content#000000/>meta namedescription content/>link relapple-touch-icon href/favicon.ico/>link relmanifest href/manifest.json/>meta nameGEMS content/>meta propertyog:title contentGEMS/>meta propertyog:description content/>meta propertyog:URL contenthttps://res.cloudinary.com/drt6vurtt/image/upload/v1709192486/gems/preview_fevhsb.png/>meta propertyog:image contenthttps://res.cloudinary.com/drt6vurtt/image/upload/v1709192486/gems/preview_fevhsb.png/>link hrefhttps://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css relstylesheet integritysha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH crossoriginanonymous/>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.15.4/css/all.css integritysha384-DyZ88mC6Up2uqS4h/KRgHuoeGwBcD4Ng9SiP4dIRy0EXTlnuz47vAwmeGwVChigm crossoriginanonymous/>link relpreconnect hrefhttps://fonts.googleapis.com/>link relpreconnect hrefhttps://fonts.gstatic.com crossorigin/>link relpreconnect hrefhttps://fonts.googleapis.com/>link relpreconnect hrefhttps://fonts.gstatic.com crossorigin/>script async srchttps://www.googletagmanager.com/gtag/js?idG-V97DQDCZ71>/script>script>function gtag(){dataLayer.push(arguments)}window.dataLayerwindow.dataLayer||,gtag(js,new Date),gtag(config,G-V97DQDCZ71)/script>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.15.4/css/all.css integritysha384-DyZ88mC6Up2uqS4h/KRgHuoeGwBcD4Ng9SiP4dIRy0EXTlnuz47vAwmeGwVChigm crossoriginanonymous/>title>GEMS/title>script deferdefer src/static/js/main.34c128b8.js>/script>link href/static/css/main.bf5d4a6c.css relstylesheet>/head>body>div idroot>/div>script srchttps://code.jquery.com/jquery-3.2.1.slim.min.js>/script>script srchttps://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js>/script>script srchttps://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js integritysha

Subdomains

Date	Domain	IP
refund.gems.vip	2025-05-03	104.26.7.187
privatesale.gems.vip	2025-08-18	172.67.70.229
staking.gems.vip	2024-10-23	172.67.70.229
dopstaking.gems.vip	2025-05-09	104.26.6.187
prod-api.gems.vip	2025-08-18	104.26.7.187
claim-api.gems.vip	2025-05-27	172.67.70.229
claim.gems.vip	2024-10-23	104.26.7.187
incadmin.gems.vip	2025-08-18	172.67.70.229
leaders.gems.vip	2025-05-24	104.26.7.187

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gems.vip

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains