Security Scan Report: geminii-logen.gitbook.io

Redirected to:
https://geminii-logen.gitbook.io/sign-in
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://geminii-logen.gitbook.io/

Effective URL:
https://geminii-logen.gitbook.io/sign-in
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Gemini crypto-exchange sign-in page on a gitbook.io subdomain, using homoglyph-styled branding and copied testimonials. Flagged by Google Safe Browsing for social engineering (2 hits). Do not enter credentials.

Risk Factors (5)
Google Safe Browsing social-engineering (phishing) detection on the scanned URL
Impersonation of the Gemini cryptocurrency exchange brand on a non-official domain
Unicode homoglyph obfuscation of the brand name in the title and heading
Lure titled 'Login | Sign In' with no legitimate authentication endpoint present
Borrowed press logos (NYT, Bloomberg, WSJ) used as fake trust signals
Domain age information unavailable

Details

Page Title

G𝓮miñi : Login | Sign In

Scan Type

public

Domain Name Analysis

You're looking at domain 'geminii-logen.gitbook.io' on the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'geminii-logen'. The core label 'gitbook' covers 7 characters holding three vowels versus four consonants. It segments into three words: g, it, book. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://geminii-logen.gitbook.io/

Page Load Overview

2.60s
Total Load Time
868 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:260 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software50% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
50%
documentation technical
50%
cryptocurrency blockchain
43%
gambling betting
31%
government public service
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T151543A049111E2289D62DE68137E3D34E08EA99B56F0907CF7DDEBE4CB860BE8745E5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3mU5IuKLVfxU3Grnawo3IBnqA/7YJ7FmU2W57vGPiFH4jh+KzqchtKM3L1:3mU5IuKLVfxXnawqA9tKM3L1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:279355:GowB0MIchGZAGGhCj0KGQDAWAYgAwAcCEaygu0SyISUICsBeLBEAAAGFFMoBEtZhBZBAgBCBEjQYA+CFOQHtgDJSlBbFDsHo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc3c3cbdbfbffff
Perceptual Hash:e171868e9a9a8fcc
Difference Hash:1996169a16060060
Wavelet Hash:00c303030303ff9f
Color Hash:#1f935d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data