loginusagemini[.]godaddysites[.]com

This domain, loginusagemini.godaddysites.com, is identified as a high-risk phishing site specializing in brand impersonation targeting Gemini. The domain is currently offline but was actively used to mimic the Gemini login interface, as evidenced by the page title 'Gemini: Login | Sign In.' The threat type is classified as brand_impersonation, with Gemini as the primary target of the deception.

Analysis indicates the domain was flagged by 20 of 95 security vendors on VirusTotal, reflecting broad detection across the security community. It resolves to the IP address 76.223.105.230, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The domain was registered through GoDaddy.com, LLC on November 18, 2013, and employs an SSL certificate issued by Go Daddy Secure Certificate Authority - G2. It appears on four security blocklists, including PhishDestroy, MetaMask, SEAL, and PhishingDB, further confirming its malicious classification.

Although the domain is currently offline, its historical activity and infrastructure suggest a persistent threat. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should monitor for related domains or subdomains that may emerge using similar naming conventions. End-users should be educated on recognizing brand impersonation tactics, particularly those involving cryptocurrency platforms. If credentials were entered on this site, immediate password resets and multi-factor authentication reviews are recommended for affected accounts.