Security Scan Report: gemniilognn.gitbook.io

Redirected to:
https://gemniilognn.gitbook.io/us
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://gemniilognn.gitbook.io/

Effective URL:
https://gemniilognn.gitbook.io/us
Redirected

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Look-alike gitbook subdomain imitating Gemini's crypto login with unicode-obfuscated branding; no on-page credential form, but clear brand impersonation makes it unsafe.

Risk Factors (4)
Typosquatted/attacker-controlled subdomain impersonating a Gemini login page
Unicode homoglyph obfuscation of the impersonated brand name
Brand impersonation of a cryptocurrency exchange on a shared hosting subdomain
Crypto-asset access theme typical of credential-phishing funnels
Domain age information unavailable

Details

Page Title

Ɠemini® Login | Ɠemini® Login | - Sign In - Ɠemini

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'gemniilognn.gitbook.io' is registered; it also runs on subdomain 'gemniilognn'. The second-level label 'gitbook' is 7 characters long holding three vowels versus four consonants. Breaking it apart gives 3 words: g, it, book. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Gemini® Login | - Sign In - Gemini ©& Powered by GitBook Gemini® Login Gemini® Login - Access Your Digital Assets with Ease: A Step-by-Step Gemini® Login Guide GEMINI: Buy bitcoin and crypto inst...

Page Load Overview

3.12s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,688 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain97% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
97%
technology software
92%
documentation technical
89%
finance banking
67%
phishing scam
55%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153543A009115E228DE729EA4137D7D35E08EE54A91E0D139B7DCDBE0DBC60FA8696F8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8ZU5IuKLVfxa3nrwRli3Rz6eAh7YJ7FmU2W57vGPiFX4jW+KVxWhtjMrLk:8ZU5IuKLVfxQwRlyAxtjMrLk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:283316:xGiMagcTAaJIEBFEgFzJ1wANIQQeAgSCJcbNUBBAQD1QB4RP6j9gmYkAlEGEEipxJYQAiRmViIjQGNUPYgJE1SAgCESYks8D

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc7c3efc3c3c7c3
Perceptual Hash:b1999a989b9b6664
Difference Hash:1016061e161e1e0e
Wavelet Hash:8fc3c3c3c3c3c383
Color Hash:N/A

Other Hashes

Crop Resistant:1016061e161e1e0e

Scan History

Scan history not available

Unable to load historical scan data