jeminilougeq[.]webflow[.]io

Analysis of jeminilougeq.webflow.io indicates active brand impersonation targeting Gemini, a cryptocurrency exchange platform. The domain, registered on June 12, 2026, through Webflow, currently resolves to IP 172.64.151.8 and is hosted behind Cloudflare infrastructure utilizing HTTP/3. The page title, 'Gemini Login - Trading Exchange Platform,' explicitly suggests an attempt to mimic Gemini's authentication interface, though the exact content and functionality of the site remain unverified. Technical indicators reveal the domain is flagged by 1 security blocklist and has a Gridinsoft trust score of 0/100, reflecting high-risk classification. Seventeen of 95 security vendors on VirusTotal have marked this domain as malicious, though this does not constitute definitive proof of intent. The SSL certificate is issued by Google Trust Services, a common but not exclusive characteristic of legitimate and malicious sites alike. Infrastructure analysis shows the domain is still active as of July 12, 2026, and is blocked by PhishDestroy. Defenders are advised to treat this domain as hostile pending further analysis. Network-level blocking of 172.64.151.8 and monitoring for related Webflow-hosted subdomains impersonating financial or cryptocurrency services is recommended. No evidence currently links this domain to a specific phishing kit or actor, and attribution remains uncertain.