genimilogin[.]homes

Analysis indicates that the domain genimilogin.homes is involved in brand impersonation, specifically targeting the cryptocurrency exchange Gemini. The domain poses a high risk to users by attempting to deceive them into believing they are interacting with a legitimate Gemini login page, which can lead to the theft of sensitive information such as login credentials and personal data.

Infrastructure analysis reveals that genimilogin.homes has been flagged by 14 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain was registered through Dynadot LLC on October 29, 2025, and resolves to the IP address 104.21.36.108, located in the United States and associated with AS13335 Cloudflare, Inc. Additionally, the domain appears on one security blocklist and is flagged by Google Safe Browsing for phishing activities, further confirming its malicious intent. Notably, the domain does not possess an SSL certificate, which is a common indicator of a lack of legitimacy.

Users who have visited genimilogin.homes should immediately check their Gemini account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial accounts for any suspicious transactions and report the incident to Gemini's support team. To avoid similar threats, users are advised to verify the URL of the website they are accessing and ensure it matches the official Gemini domain, gemini.com.