geminisparklescleanltd[.]com

Analysis of geminisparklescleanltd.com shows the domain was registered on 21 February 2026 through Hosting Concepts B.V. d/b/a Registrar.eu. The site resolves to the IPv4 address 35.204.150.5, which is announced by AS396982 belonging to Google LLC and geolocated in the Netherlands. DNS resolution is handled by three OpenProvider nameservers (ns1.openprovider.nl, ns2.openprovider.be, ns3.openprovider.eu). HTTP requests return a 301 redirect, and the underlying web stack includes JouwWeb, Nginx, and a reCAPTCHA challenge.

The presented page title, “GEMINI SPARKLES CLEAN LTD”, explicitly references the Gemini brand, and the domain is classified as a crypto‑scam that impersonates Gemini. The trust score assigned by Gridinsoft is 0 out of 100, indicating a high likelihood of malicious intent. The SSL certificate is identified as “R12”, but no further validation details are available. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy service.

VirusTotal analysis involved 93 scanning engines, none of which reported a detection at the time of observation; this absence does not confirm benign behavior. Current status is listed as active, and no public content beyond the page title has been captured, leaving the exact phishing flow and payload undisclosed. Defenders should consider adding geminisparklescleanltd.com to local deny lists, enforce outbound filtering for the associated IP range, and monitor for any traffic attempting to contact the domain. Continuous re‑evaluation is advised, especially if the site begins serving credential‑capture pages or cryptocurrency‑related transaction requests.