gemmineelogiz[.]webflow[.]io

This domain, gemmineelogiz.webflow.io, poses a specific threat of brand impersonation targeting the Gemini brand. The domain was designed to trick digital investors into providing sensitive information, such as login credentials, by mimicking the official Gemini login page with the title 'Gemini® Login: Empowering Digital Investors with Trusted'.

Analysis indicates that the domain is registered through Webflow and resolves to the IP address 172.64.151.8, which is located in California, USA and is associated with Cloudflare, Inc. The domain has been flagged by 21 out of 95 security vendors on VirusTotal and appears on one security blocklist. It was taken offline as a result of security measures, but evidence of its malicious intent remains.

If users have visited this domain, they should immediately check their Gemini account for any unauthorized activity and change their passwords. Additionally, users should monitor their financial statements for any suspicious transactions and consider contacting Gemini's customer support for further guidance. It is also recommended to run a full system scan for malware and to be vigilant about similar phishing attempts in the future.