page-gemini-places[.]pages[.]dev

PhishDestroy identifies page-gemini-places.pages.dev as a confirmed brand impersonation phishing domain targeting Gemini. The site is currently offline, but its deceptive intent remains clear. This domain was designed to mimic Gemini's branding to steal user credentials or personal information, posing a significant risk to anyone who may have encountered it while it was active.

Technical analysis reveals that page-gemini-places.pages.dev was flagged by 10 out of 95 VirusTotal security vendors, indicating widespread recognition as malicious. The domain was registered on October 25, 2025, through Cloudflare, Inc., and resolved to IP address 172.66.47.63. Its SSL certificate was issued by Google Trust Services (WE1), a common practice for phishing sites to appear legitimate. The domain appears on 1 security blocklist and had a page title of "Suspected phishing site | Cloudflare," which suggests Cloudflare's own warnings were triggered. Despite these red flags, the domain was created recently and quickly taken down, but users who visited the site before takedown may have been exposed.

Given the elevated risk level and confirmed impersonation of Gemini, PhishDestroy strongly advises users to avoid any interaction with this domain. If you entered any credentials or personal data on this site, change your passwords immediately and enable two-factor authentication on your accounts. Contact Gemini support if you suspect your account has been compromised. Stay vigilant against similar phishing attempts, and always verify the authenticity of websites before entering sensitive information.