gemanelogin.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gemanelogin.webflow.io
gemanelogin.webflow.io appears to be a Webflow-hosted page presenting itself as a login or promotional entry point for Gemini, a well-known cryptocurrency exchange and digital asset platform. The page title and meta description repeatedly reference "Gemini Login" and digital asset management, while the screenshot shows branding, navigation labels, and marketing sections associated with a crypto trading service.
Based on the visible content, this page does not appear to be an independent informational blog or neutral review page. Instead, it appears to imitate the look and messaging of Gemini-branded cryptocurrency services while being hosted on a third-party subdomain rather than an official Gemini-owned domain. The presence of an outbound link to a different external domain for login-related activity may indicate that the page is intended to funnel visitors toward another destination.
Safety Assessment for gemanelogin.webflow.io
Multiple scan signals indicate elevated risk at the time of this scan. The URL was flagged by 19 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, one threat-database listing was present, and the domain's IP address was listed on one mail-reputation blocklist. While the malware file scan itself did not detect malicious files, that result does not outweigh the broader phishing-related consensus from multiple security engines.
The page content also raises concern because it closely imitates the branding and layout of Gemini while using a Webflow subdomain that does not appear to be an official Gemini web property. That kind of resemblance may indicate a look-alike page intended to capture user trust, especially given the login-focused wording and the presence of an external linked destination unrelated to the official brand domain.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and traffic appears to be proxied through Cloudflare infrastructure. The resolved IP address is 104.18.36.248, with hosting attributed to Cloudflare in Toronto, Canada. The domain uses Cloudflare nameservers, and DNSSEC appears to be unsigned.
Although the TLS setup appears functional, a valid certificate should not be treated as proof of legitimacy. The more notable technical concern is that this is a hosted subdomain on webflow.io rather than a primary brand-owned domain, combined with phishing-related detections and a login-themed presentation that may not match the expected official infrastructure of the impersonated service.
Share your experience with this website. Was it safe? Did you encounter any issues?