This is a false positive. dropgems.xyz is my own legitimate personal web application — an airdrop/crypto portfolio management tool. It does not have any login/password fields collecting third-party credentials, does not impersonate any bank, exchange, or wallet provider, and does not request private keys or seed phrases.
I have already submitted this URL for reanalysis via OpenTIP multiple times over the past 3+ days, but it is still flagged as "Dangerous / Phishing" with no update or email response. We believe this may be an automated heuristic flag triggered because the domain is very new and relates to cryptocurrency-themed content.
Could someone from the Kaspersky team please help expedite manual review of this domain? Happy to provide any additional verification if needed.
URL: https://dropgems.xyz/
This is a false positive. dropgems.xyz is my own legitimate personal web application — an airdrop/crypto portfolio management tool. It does not have any login/password fields collecting third-party credentials, does not impersonate any bank, exchange, or wallet provider, and does not request private keys or seed phrases.
Domain details:
- Registered: 9 Jul 2026 via P.A. Viet Nam Company Limited
- Hosting: Vercel (frontend), Render (.NET Core backend)
- OpenTIP report: https://opentip.kaspersky.com/https%3A%2F%2Fdropgems.xyz%2F/?tab=lookup
I have already submitted this URL for reanalysis via OpenTIP multiple times over the past 3+ days, but it is still flagged as "Dangerous / Phishing" with no update or email response. We believe this may be an automated heuristic flag triggered because the domain is very new and relates to cryptocurrency-themed content.
Could someone from the Kaspersky team please help expedite manual review of this domain? Happy to provide any additional verification if needed.
Thank you.