gemini-sx-login.gitbook.io
Category: Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gemini-sx-login.gitbook.io
This domain appears to host a GitBook page styled as a "Gemini Login" portal and presented as a financial-services or cryptocurrency-related landing page. The screenshot shows branding, navigation labels, and promotional copy associated with Gemini, suggesting the page is attempting to resemble a login or onboarding page for the well-known Gemini platform rather than functioning as an independent documentation site.
Based on the domain structure, the page is published under the gitbook.io hosting platform rather than on the official gemini.com domain. The subdomain name "gemini-sx-login" and the page title using stylized characters may indicate an attempt to attract users searching for Gemini account access. Available classification data also places the site in phishing/fraud-related categories rather than as a normal technology documentation page.
Safety Assessment for gemini-sx-login.gitbook.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 18 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, the domain closely resembles gemini.com in plain language and may be a look-alike intended to imitate the Gemini brand, which is a significant concern for credential theft or financial fraud. The screenshot further supports this concern because it presents Gemini branding and login-oriented wording while being hosted on a third-party GitBook subdomain rather than the brand's primary domain.
The malware scan did not detect malicious files at the time of scanning, and major content-malice threat databases listed in the report were largely clean. However, that does not outweigh the broader phishing consensus from multiple security engines and the strong visual/domain resemblance to a known financial brand. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services and is served through Cloudflare infrastructure at IP address 172.64.147.209, with hosting geolocated to Canada based on available data. The registrar is Cloudflare, Inc., the domain has existed for many years, and the nameservers are Cloudflare-operated. DNSSEC appears to be unsigned at the time of this scan.
From a technical perspective, the page is hosted as a gitbook.io subdomain rather than on a dedicated official brand domain, which is notable given the financial-brand presentation. No malicious files or flagged external links were identified by the page-level malware scan, but infrastructure legitimacy alone does not reduce the phishing concern when branding, domain naming, and multi-engine detections point in the opposite direction.
Share your experience with this website. Was it safe? Did you encounter any issues?