https://gmbl.sy99.de/
43.174.247.33 · ACE
Singapore, Singapore
—
200 · 15.6s
Valid· TrustAsia DV TLS RSA CA 2025, TrustAsia Technologies, Inc., CN
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Gemini Balance
Vendors
26/26
Status
completed
Registered-domain escalation
Submit sy99.de as the primary IOC, enriched with evidence from hostile subdomains like gmbl.sy99.de.
No KB/IOK detections were recorded for this scan.
finance | technology | ecommerce · 4/5/2026
This page at gmbl.sy99.de presents a Gemini Balance login UI (页面标题包含 'Gemini Balance' and branding visuals) but is hosted on a non-official domain. The domain impersonates Gemini, leveraging a Gemini-like login interface to capture credentials. The domain name and page content do not align with Gemini's official domain, indicating a typosquat/brand impersonation attempt.
This site impersonates Gemini Balance on a non-official domain gmbl.sy99.de. The page title explicitly references Gemini Balance, and the UI mirrors a credential entry flow with a password field and login form posted to /auth. The SSL cert is valid but issued to the host itself, and the domain appears newly registered with limited WHOIS visibility. The combination of brand impersonation, credential collection form, and SPA-like asset loading constitutes a high-risk phishing domain intended to harvest user credentials. Immediate action is warranted to suspend the domain and block hosting to prevent further credential theft.
Suspend Domain