gmxxdde[.]weebly[.]com

This site, gmxxdde.weebly.com, is an impersonation page targeting the GMX brand. The page title is "gmx.de," indicating it was designed to mimic the official GMX email and web services portal. The threat is a phishing or credential harvesting campaign, where visitors may be tricked into entering login credentials or personal information under the false impression they are accessing a legitimate GMX service.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports 17 out of 95 security vendors flagging it as malicious, including ADMINUSLabs, BitDefender, CyRadar, ESET, and Emsisoft. The domain is registered through Safenames Ltd. and resolves to IP address 74.115.51.8, hosted on AS27647 (Weebly, Inc.) in the United States. It was created on February 26, 2026, and uses a Let's Encrypt SSL certificate (serial E8). The nameservers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns.

The site is currently down or offline. Despite its inactive status, the risk level remains high due to the precise brand impersonation and the significant number of security vendor detections. GridinSoft trust rating is 0 out of 100, confirming the site is untrustworthy. Users who previously encountered the site while it was active may have been exposed to credential theft.