Gemini is compromised. Gemini user data is being used for complex phishing attempts.

I just got an email allegedly from Metamask saying I have to sync my wallet due to the merge.

The address is from a Seattle heating company, and the link does not match the one in the email.

I use email aliases so each online account has a specific email linked to it. This phishing attempt went to the email used by and only by my Gemini account. Thankfully I have no funds there but this was a complex phish and twitter has another example of an SMS-based Coinbase phishing attempt.

Email I received

The website that the link takes you to

Gemini is compromised. Either they sold their user data or got hacked.