Security Scan Report: gimixnilogenix.gitbook.io

Redirected to:
https://gimixnilogenix.gitbook.io/sign-in
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 37 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://gimixnilogenix.gitbook.io/

Effective URL:
https://gimixnilogenix.gitbook.io/sign-in
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

GitBook subdomain presents itself as a Gemini crypto login/sign-in page with copied brand copy, but no credential form or threat-intel hit was captured. Brand impersonation without observed harvesting — treat as unsafe to enter data.

Risk Factors (3)
Displays the Gemini brand and a login/sign-in framing on a domain unrelated to Gemini
Deceptive use of a free documentation host with a randomly generated subdomain name
Copied brand marketing text mixed with garbled, apparently auto-injected content
Safety Factors (4)
No credential, password or payment form is present on the captured page
No Indicators of Compromise, no JavaScript malware signatures, no IDS alerts
No known phishing kit in the kit roster
No cross-origin credential exfiltration or obfuscated network sinks observed
Domain age information unavailable

Details

Page Title

Gemini Login | Sign In

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'gimixnilogenix.gitbook.io' is registered with subdomain 'gimixnilogenix'. Its registrable label 'gitbook' stretches across 7 characters split between 3 vowels and four consonants. Splitting it apart reveals 3 words: g, it, book. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Gemini Login | Sign In & Powered by GitBook Gemini Login | Sign In Gemini & Login. Welcome to the Gemini & Login, Manage your projects, see your quote and order statuses, pay invoices. GEMINI Mar...

Page Load Overview

7.49s
Total Load Time
754 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:368 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical71% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
71%
technology software
62%
cryptocurrency blockchain
35%
finance banking
29%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
374--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165444B008115E2289E73DE6413BD7D38A08EA54B92E0E039B7DDD7E0DB870FA5695F9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:IzN8i9J4ZU5IuKLVfxa3nrwKzNxKzNKKzNxKzNFmxi3Rz6eAh7YJ7FmU2W57vGPF:1ZU5IuKLVfxQlmxyAttrM1Lu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:268610:cEQkQQAjQQoRqCYATYIOyMFIYoQBKbCsUGwaBEGCJOMrmKMmiEGAX4EBhytIoPaAxYlRBJiAIKWJIIRAVAJQImEJELAEHZGi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc3c3cbcbf3ffff
Perceptual Hash:a1319e9a9b876c6c
Difference Hash:591e961a96160c60
Wavelet Hash:80c3c3c3c3c3e39f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data