gameenilogin[.]webflow[.]io

The phishing domain gameenilogin.webflow.io impersonates Gemini, a popular cryptocurrency exchange, to deceive users into providing their login credentials. The site, titled 'Gemini $Login - Your Gateway to Secure Digital Asset Management,' presents itself as a legitimate login portal. Despite the site now being offline, it was detected by 15 out of 91 vendors on VirusTotal, indicating significant recognition of its malicious nature.

The domain was hosted on IP address 172.64.151.8 and registered through Webflow, with its SSL certificate issued by Google Trust Services. The presence of the domain on one public blocklist, specifically PhishDestroy, highlights the threat it posed while active. The site's takedown reduces its immediate threat, but the incident underscores the ongoing risk of phishing attacks targeting cryptocurrency users.

Phishing domains like gameenilogin.webflow.io exploit the trust users place in familiar brands. By mimicking Gemini's branding and login processes, the attackers aimed to harvest sensitive information such as usernames and passwords. This case exemplifies the need for vigilance in the cryptocurrency sector, where the stakes are high and the potential for financial loss is significant. Users should remain cautious and verify URLs before entering credentials.