gemini-llc[.]wixstudio[.]com

PhishDestroy identifies gemini-llc.wixstudio.com as an active impersonation site targeting the cryptocurrency exchange brand Gemini. This domain poses a high risk of crypto drainer deployment—a malicious script designed to siphon funds from connected wallets upon wallet connection attempts. This domain resolves to IP 34.144.206.118 and operates under Wix’s hosting infrastructure via WixStudio. VirusTotal reports 4/95 detections as of the latest scan, indicating current evasion of major antivirus engines. The site utilizes a Let’s Encrypt SSL certificate to mimic legitimacy, with no historical presence on major blocklists such as Google Safe Browsing or PhishTank at time of assessment. Registrar data indicates recent creation with no prior trust indicators, compounding its suspicious profile. Users must refrain from entering login credentials, connecting crypto wallets, or downloading any files. Always verify the URL, cross-check on PhishDestroy, and use bookmarked official links for cryptocurrency services. If interaction occurred, disconnect wallet immediately, revoke permissions via blockchain explorers, and run a malware scan. Report this domain to PhishDestroy to help prevent further victimization.