Dasbor Analitik
⚠️
Suspicious Domain — Listed on PhishDestroy
This domain is on the PhishDestroy threat list. VirusTotal checked 91 security vendors. Analysis is ongoing — exercise caution and do not enter credentials or personal information. Create a complaint draft, review it, and submit it yourself if appropriate.
Domain security & threat intelligence

getegms[.]github[.]io

Pemeriksaan phishing dan keamanan getegms.github.io

“Getgems – The Official NFT Hub of TON”

Threat verdict High 65/100 stored risk score
Availability Last known active Latest stored reachability observation
Risk signals
Brand impersonation: Curve Last known active
Aug 26, 2025 Unavailable since Feb 16, 2026 Curve NFT Scam US US NFT Scam + more
Ringkasan laporan

getegms.github.io: pemeriksaan VirusTotal tersimpan menunjukkan 0 deteksi dari 91 pemindai. Tinjau DNS, SSL, registrar, dan daftar blokir.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Summary
HIGH
Ref
79100EFA
Score
65/100
Mode
Evidence v1

PhishDestroy first recorded getegms.github.io on Aug 26, 2025. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 65/100.

The latest stored availability state is “Last known active” (HTTP 200) on Aug 2, 2026 at 00:01 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 0 detections from 91 scanners in the stored check on Jul 26, 2026 at 04:17 UTC. A zero-vendor result is not a safety verdict. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 2, 2026 at 21:41 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 2, 2026 at 02:01 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 15, 2026 at 00:34 UTC. That result is not evidence of safety. A URLScan capture is stored from Mar 5, 2026 at 23:44 UTC.

Stored context lists registrar GitHub Pages, IP address 185.199.109.153, apparent target Curve. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

Classification: HIGH · Stored evidence snapshot
VirusTotal
VirusTotal
0 det.
URLScan
URLScan
Report ↗
Gridinsoft
0/100
TLS certificate
Expired or unverified -87d
Observed status
Last known active 200
PhishDestroy
Daftar Hapus
Listed
Cakupan data VirusTotal no detections URLQuery checked — no match OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict checked — no malicious verdict Pemblokiran DNS not checked TLS expired or unverified WHOIS not parsed Screenshot external capture Rantai pengalihan not probed Gridinsoft 0/100

Alur Tanggapan Ancaman Pipeline

Discovery
Checks
Reports
Availability
11/13
Penemuan dan Pengambilan Data Secara Proaktif
Ancaman Telah Diterima
1/1 ✓
Ancaman Telah Diterima
getegms.github.io telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
Aug 26, 2025
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded
9/9 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
Mar 05, 2026
URLScan Verdict
URLScan returned no malicious verdict; this provider result is not a safe-domain determination · score 0
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
Web Archive
Preserved in Wayback Machine — historical evidence archived
VirusTotal
91 vendors checked on VirusTotal — no vendor detections recorded at check time
Jul 26, 2026
Google Safe Browsing
Mar 02, 2026
Brand Impersonation
Impersonation of Curve
Forensic Evidence Collected
Stored evidence from URLScan.io, stored screenshot
Mar 05, 2026
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Complaint Draft Available
PENDING
Complaint Draft Available
No submission is recorded. You can create a draft, review it, and submit it yourself to the appropriate authority.
Publikasi dan Ketersediaan
DestroyList Published · Monitoring Continues
1/2
Daftar yang Dihapus Telah Dipublikasikan
Aug 26, 2025
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

Status Daftar Blokir Publik

MetaMask
MetaMask
NO MATCH
ScamSniffer
ScamSniffer
NO MATCH
Polkadot
Polkadot
NO MATCH
CryptoFirewall
CryptoFirewall
NO MATCH
OpenPhish
OpenPhish
NO MATCH
PhishDestroy
PhishDestroy
SOURCE DATASET
SEAL
SEAL
NO MATCH
Enkrypt
Enkrypt
NO MATCH
Phishunt
Phishunt
NO MATCH
Codeesura
NO MATCH
DiscordPhishing
DiscordPhishing
NO MATCH

Pengumpulan Bukti

Stored Capture
2025-08-26 13:50 UTC
Malicious
Forensic screenshot of getegms.github.io showing the phishing page layout
IP: 185.199.109.153
GitHub Pages
View Full Size URLScan Report Wayback Download

Intelijen Domain

Domaingetegms.github.io
URLScan Verdict No malicious verdict recorded score 0 report ↗
Server / ASN GitHub.com · AS54113 FASTLY, US
IP Reputation abuse score 21/100 15 reports checked Jul 19, 2026
Registrar GitHub Pages
Abuse contactwebmaster@getegms.github.io, postmaster@getegms.github.io, info@getegms.github.io, admin@getegms.github.io, abuse@getegms.github.io, contact@getegms.github.io
Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →
Pencarian WHOISICANN RDAP for getegms.github.io →
IP Address 185.199.109.153 US
GeoUS San Francisco, US
NetworkASAS54113 · AS54113 Fastly, Inc.
Reverse IPviewdns.info → rapiddns.io →
Elapsed Since First Report 174 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali TerdeteksiAug 26, 2025
NameserversN/A
TLS Fingerprint02bdd44d1137ce2317d9aaccd36f753caa1fbec7…
TLS SAN Domainsgithub.comgithub.iogithubusercontent.com
Favicon Hashfavicon54e676321f50daa6a515ddab08721505
Page Title
Getgems – The Official NFT Hub of TON
Impersonates
Curve Discord Ethereum Magic Eden Mexc Near Okx Opensea +5
TLS Certificate
Expired or unverified · Issued by Let's Encrypt / R12
Teknologi · 7 identified
Mobirise
Page builders

Mobirise is a free offline app for Windows and Mac to easily create small/medium websites, landing pages, online resumes and portfolios.

mobirise.com 100% confidence
Varnish
Caching

Varnish is a reverse caching proxy.

www.varnish-cache.org 100% confidence
Bootstrap
UI frameworks

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

getbootstrap.com 100% confidence
GitHub Pages
PaaS

GitHub Pages is a static site hosting service.

pages.github.com 100% confidence
Sectigo
SSL/TLS certificate authorities

Sectigo provides SSL certificate and computer security products.

sectigo.com 100% confidence
HSTS
Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org 100% confidence
Fastly
CDN

Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video & streaming services.

www.fastly.com 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Bukti Terarsip

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Bukti & Laporan Eksternal Open external tools
Analisis Keamanan
URLScan No match VirusTotal ChainPatrol URLQuery No match Gridinsoft 0 trust SSL Labs Expired/unverified CF Radar Open report WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
OSINT & Intelijen
Web-Check Full scan Shodan Censys ThreatFox Batu Hudson IntelX crt.sh Certs WHOIS Wayback Archived
DNS & Jaringan
nslookup.io DNS bgp.tools ASN/Route
SEO & Domain
SpyFu Moz DA/PA Ahrefs Backlinks Analisis Mendalam

Apakah Anda Terpengaruh oleh Situs Ini?

Kamu tidak sendirian dan tidak ada yang perlu kamu malu-malui. Penipu adalah para penjahat yang cerdik dan memanfaatkan kepercayaan orang lain. Melaporkan pengalaman Anda adalah senjata paling ampuh untuk melawan penipuan — laporan Anda dapat mencegah orang lain menjadi korban dan membantu aparat penegak hukum mengambil tindakan. Diam adalah keunggulan terbesar para penipu. Hancurkan saja.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

FBI IC3
Laporkan kejahatan internet (AS)
Europol
Laporkan kejahatan siber (UE)
Action Fraud
Action Fraud
Laporkan penipuan & kejahatan siber (Inggris)
Banding atas Nama Domain
Ajukan keberatan terhadap daftar ini jika terjadi false positive
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi terkait kejahatan siber, or create a complaint draft →

Pilih negara Anda...
Lebih dari 180 negara
Zero-PII — data Anda tidak pernah meninggalkan browser Review and submit it yourself

Related Infrastructure

Stored relationships are grouped by the exact matching attribute. A shared provider or registrar alone does not prove common ownership.

Shared IP 185.199.109.153 6

This IP hosts multiple phishing domains — infrastructure shared across campaigns

register.invoice-partner.info favicon register.invoice-partner.info 23/95 shcwab.vip favicon shcwab.vip 22/95 aayush4725.github.io favicon aayush4725.github.io 21/95 aditieeeee.github.io favicon aditieeeee.github.io 21/95 adityapandey87.github.io favicon adityapandey87.github.io 20/95 servpproxmus-bit.github.io favicon servpproxmus-bit.github.io 19/95

Same registrar: GitHub Pages 6

realonepranshu.github.io favicon realonepranshu.github.io 16/95 prashantrana1494.github.io favicon prashantrana1494.github.io 15/95 mohith6929.github.io favicon mohith6929.github.io 12/95 craik07.github.io favicon craik07.github.io 15/95 skari005.github.io favicon skari005.github.io 12/95 louiseka-10.github.io favicon louiseka-10.github.io 15/95

Curve impersonation 8

These domains also target Curve users. View all Curve threats →

curve.sbs curve.sbs 19 bitcoin-evista-software.com bitcoin-evista-software.com 18 curve-v2.pro curve-v2.pro 17 scientiaskin.com scientiaskin.com 17 curve-swap.org curve-swap.org 16 curve.flnance.cldf-4app.top curve.flnance.cldf-4app.top 16 curvefi.co curvefi.co 16 curver.finance curver.finance 16

About This Report: getegms.github.io

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Getgems – The Official NFT Hub of TON”, which may be designed to impersonate Curve.

getegms.github.io has been listed on PhishDestroy as a suspicious domain. Scanned by 91 security vendors — automated detections may take time to update. PhishDestroy threat analysts continue to monitor this domain.

Jika Anda merasa informasi dalam daftar ini tidak akurat, Anda dapat mengajukan banding. Untuk informasi lebih lanjut mengenai metodologi kami, kunjungi situs kami Halaman Pertanyaan yang Sering Diajukan.

Periksa Domain Apa Pun

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Pindai Sekarang

Laporkan Phishing

Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas

Report

Pemberitahuan Ancaman Real-Time

Recent phishing reports and observed availability changes

Monitor

Tetap Terinformasi, Tetap Aman

Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive

Pemberitahuan Ancaman Real-Time Ajukan Banding Terhadap Iklan Ini
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/getegms.github.io"
  title="PhishDestroy threat report for getegms.github.io"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>