gamini-logg-in[.]godaddysites[.]com

The domain gamini-logg-in.godaddysites.com was registered on February 27, 2026 through GoDaddy, LLC and is presently active. DNS resolution points to IP address 13.248.243.5, which belongs to AS16509 Amazon.com, Inc. and is hosted in the United States. The domain uses GoDaddy nameservers (cns1.secureserver.net, cns2.secureserver.net) and presents a Go Daddy Secure Certificate Authority – G2 SSL certificate issued to GoDaddy.com, Inc. HTTP requests return a 200 status code, and the page title observed is "Gemini: Login | Sign In," indicating a credential‑phishing attempt targeting the Gemini brand. The site is built with GoDaddy Website Builder and includes RequireJS, Re:amaze, and HSTS. Threat intelligence shows the domain is listed on two security blocklists and has been blocked by PhishDestroy and PhishingDB. VirusTotal analysis recorded 17 detections out of 93 security vendors, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the high‑risk classification. The observed behavior aligns with a credential‑phishing campaign. Defenders should immediately block the domain at network perimeter and DNS layers, add the IP address to host‑based blocklists, and monitor for any related traffic to Amazon‑hosted infrastructure. Continuous re‑evaluation is advised, as the content of the site has not been fully inspected beyond the page title and known metadata.