gemini-trading[.]org

PhishDestroy identifies gemini-trading.org as a suspected phishing site designed to impersonate the legitimate cryptocurrency firm Gemini Trust Company. The domain uses a deceptive name to trick users into believing they are visiting an official crypto trading platform, likely aiming to harvest login credentials or payment details. Victims may be directed to the site via phishing emails or malicious ads, with the risk of financial fraud or account takeover.

This domain was flagged by Google Safe Browsing for social engineering tactics and shows no detections on VirusTotal out of 95 scans, indicating it is a newly emerged threat. Registered on May 29, 2025, through PDR Ltd. (PublicDomainRegistry.com), it resolves to IP 62.72.50.187, which has been linked to fraudulent financial schemes. Its SSL certificate from Let’s Encrypt adds a false sense of legitimacy, but the recent creation date and low detection rate suggest it remains active and under the radar.

If you visited gemini-trading.org, avoid entering any login or financial information. Close the tab immediately and consider running a malware scan on your device. Change passwords for any accounts shared on the site, enable two-factor authentication, and report the domain to Google Safe Browsing or your local cybercrime unit. Do not engage with suspicious links or pop-ups; always verify the URL before entering sensitive data.