# login.geminihub.xyz — SUSPICIOUS

> login.geminihub.xyz poses medium credential phishing risk. Avoid sharing credentials and verify site legitimacy before inputting sensitive data.

## Summary
PhishDestroy identifies login.geminihub.xyz as an active credential phishing domain targeting user login details. The domain's medium risk level warrants caution when interacting with the site.

The domain was created recently on December 30, 2025, and is registered through DNSPod, Inc. It resolves to IP 199.7.140.158 and appears on two separate security blocklists. VirusTotal flags this domain by 5 out of 95 security vendors, indicating partial recognition of its malicious intent.

Currently active, login.geminihub.xyz should be avoided for any sensitive transactions. Users are advised to verify URLs carefully and refrain from submitting credentials. Security teams should monitor and consider blocking this domain to reduce exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Gemini 官方原版镜像 · 登录

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: DNSPod, Inc.
- Country: CN
- IP: 199.7.140.158
- IP Country: US
- IP City: Los Angeles
- IP Org: AS979 NetLab Global
- Nameservers: point.dnspod.net stormy.dnspod.net
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["BitDefender", "Fortinet", "G-Data", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf47-72aa-763a-9ba5-1f51db5d557c.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/login.geminihub.xyz
- PhishDestroy: https://phishdestroy.io/domain/login.geminihub.xyz/
- LLM endpoint: https://phishdestroy.io/domain/login.geminihub.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/login.geminihub.xyz/
Last updated: 2026-03-16