wallet-gemini[.]com

The domain wallet-gemini.com is identified as a high-risk brand impersonation threat targeting the Gemini brand. The current status of the domain is offline, indicating that it has been taken down or is no longer active.

Analysis indicates that the domain was registered through Hello Internet Corp on January 09, 2026. It resolves to the IP address 188.114.97.3, located in the United States and associated with AS13335 Cloudflare, Inc. The domain has been flagged by 13 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. Additionally, the domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, further corroborating its malicious nature. The SSL certificate used by the domain is identified as WE1, which may have been used to lend a false sense of security to potential victims.

The domain is currently offline, but security professionals are advised to remain vigilant as it may be reactivated. Organizations and individuals should ensure that their security systems are updated to block this domain and similar threats. Users should verify the authenticity of any Gemini-related communications and only access official Gemini services through trusted and verified channels.