gminimilognix[.]gitbook[.]io

The domain gminimilognix.gitbook.io has been identified as a high-risk brand impersonation phishing site specifically targeting Gemini cryptocurrency exchange users. This threat was flagged by PhishDestroy as part of a coordinated takedown effort, and it has since been taken offline.

Technical analysis reveals that the domain was created on March 30, 2014, and is registered through Cloudflare, Inc. It resolves to IP address 104.18.40.47 and uses an SSL certificate from Google Trust Services / WE1. VirusTotal analysis shows that 17 out of 95 security vendors flag this domain as malicious, and it appears on 4 security blocklists. The page title was 'Ɠemini @ Login | Ɠemini @ Login', designed to deceive users into entering their credentials.

As of the latest check, the phishing site is offline, but users should remain vigilant as similar threats may reappear. PhishDestroy recommends that users avoid interacting with this domain, enable two-factor authentication on their accounts, and report any suspicious activity to the legitimate Gemini support team.