geminixelogin[.]gitbook[.]io

The domain geminixelogin.gitbook.io is flagged as a high‑risk brand‑impersonation infrastructure targeting the Gemini brand. Analysis shows the domain was registered on February 21, 2026 and resolves to the Cloudflare‑provided address 172.64.147.209, which is associated with AS13335 in the United States. The site is protected by an SSL certificate issued by Google Trust Services (WE1) and serves HTTP/3 traffic, but currently returns an HTTP 403 status, indicating that access is being denied or blocked. Security telemetry reports a Google‑grade trust score of 0 out of 100 and the domain appears on a single blocklist; it is also listed as blocked by PhishDestroy. VirusTotal scans show that 13 of 93 security vendors have flagged the domain, reinforcing the malicious assessment. The declared scam type is a crypto scam, and the domain impersonates Gemini, though the exact page content has not been captured. Defenders should add the domain and its resolving IP to network and web‑filter blocklists, monitor DNS queries for the host, and enforce TLS inspection to verify the certificate chain. Continuous re‑evaluation is advised, as the infrastructure may evolve or host additional payloads.