ginikigqling-us[.]godaddysites[.]com
“G𝓮miñi Login 🌊 | Sign In”
ginikigqling-us.godaddysites.com — 最后已知的活跃状态 (HTTP 200). 诈骗类型:Banking Phishing. 证据摘要: VirusTotal 16/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Emsisoft); PhishDestroy score 100/100. 注册商: GoDaddy Sites.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain ginikigqling-us.godaddysites.com has been identified as a phishing website that impersonates the legitimate Gemini cryptocurrency exchange platform. Specifically, it presents a fake Gemini login page, attempting to steal users' credentials through a deceptive sign-in interface. This domain is currently offline, having been taken down after its malicious nature was confirmed.
PhishDestroy's analysis reveals that this phishing domain was registered on March 25, 2026, through GoDaddy Sites, and it resolves to IP address 76.223.105.230. The site was flagged by 18 out of 95 security vendors on VirusTotal, indicating a high level of detection across the security community. Additionally, it appears on 1 security blocklist, and its SSL certificate was issued by GoDaddy.com, Inc. via the Go Daddy Secure Certificate Authority - G2. The page title, "G𝓮miñi Login 🌊 | Sign In," explicitly mimics the Gemini brand, using Unicode characters and an ocean wave emoji to deceive users.
As of the latest update, the domain has been taken offline, significantly reducing the immediate risk to users. However, similar phishing campaigns may arise from different domains or IPs. PhishDestroy strongly advises users to always verify the authenticity of any login page by manually typing the official URL into their browser. For cryptocurrency exchanges like Gemini, enable two-factor authentication and never enter credentials on sites accessed via unsolicited links or emails. If you suspect you have interacted with this phishing site, change your passwords immediately and contact Gemini support.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: godaddysites.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain godaddysites.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。