# Phishing sites impersonating GMX PhishDestroy has recorded 51 phishing domains impersonating GMX since 2025-11-20, 2 of them in the last 30 days. The most used registrars are Squarespace Domains II and Web Commerce Communications; the most common TLDs are .com and .dev. Open GMX only from its official app or a saved bookmark. 51Domains, all time 2Last 30 days 24Online at last check 12Confirmed takedowns ## New domains in the last 90 days GMX phishing domains detected per day: 10 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake GMX site Words most often added to the brand in reported domains: exchange, exchanges, trx, exchanger, interface, cap, spec, connectweb, shy, years. - Type the address yourself or use a bookmark; phishing links for GMX arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - GMX does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest GMX phishing domains The 50 most recently detected domains impersonating GMX Domain | First detected | Status at last check | Registrar | [amidabuli.com](https://phishdestroy.io/domain/amidabuli.com/) | 2026-10-21 | Online | InterNetX | [exchange.taxi](https://phishdestroy.io/domain/exchange.taxi/) | 2026-10-18 | Online | NameCheap | [nxxchange.ajeflex.com](https://phishdestroy.io/domain/nxxchange.ajeflex.com/) | 2026-09-16 | Offline | OwnRegistrar | [necessary-maroon-2yx1anb9.edgeone.dev](https://phishdestroy.io/domain/necessary-maroon-2yx1anb9.edgeone.dev/) | 2026-09-11 | Online | MarkMonitor | [xexchanger.pages.dev](https://phishdestroy.io/domain/xexchanger.pages.dev/) | 2026-09-02 | Offline | Cloudflare Pages | [tgrexchange.site](https://phishdestroy.io/domain/tgrexchange.site/) | 2026-08-25 | Offline | Registrar of Domain Names REG.RU | [exchange.interlink.store](https://phishdestroy.io/domain/exchange.interlink.store/) | 2026-08-17 | Online | HOSTINGER operations | [alphastore.vg](https://phishdestroy.io/domain/alphastore.vg/) | 2026-08-04 | Online | NICENIC | [cap-t2.spec-connectweb3.tv](https://phishdestroy.io/domain/cap-t2.spec-connectweb3.tv/) | 2026-08-04 | Online | NICENIC | [cap-t1.spec-connectweb3.tv](https://phishdestroy.io/domain/cap-t1.spec-connectweb3.tv/) | 2026-08-04 | Online | NICENIC | [trx-exchange.com](https://phishdestroy.io/domain/trx-exchange.com/) | 2026-07-22 | Online | Dominet (HK) | [dexexchange.live](https://phishdestroy.io/domain/dexexchange.live/) | 2026-07-14 | Online | Name.com | [xtbexchange.com](https://phishdestroy.io/domain/xtbexchange.com/) | 2026-07-13 | Online | Dynadot | [exchange.trxdr.com](https://phishdestroy.io/domain/exchange.trxdr.com/) | 2026-06-19 | Online | Internet Domain Service BS | [exchange.base.software](https://phishdestroy.io/domain/exchange.base.software/) | 2026-06-15 | Online | Porkbun | [gmx-solana-interface-classic.pages.dev](https://phishdestroy.io/domain/gmx-solana-interface-classic.pages.dev/) | 2026-06-01 | Online | Cloudflare | [exchange.syntnetix.com](https://phishdestroy.io/domain/exchange.syntnetix.com/) | 2026-05-30 | Taken down | Registrar.eu | [mo-exchange.com](https://phishdestroy.io/domain/mo-exchange.com/) | 2026-05-17 | Online | Sollutium EU sp. z o.o | [exchange.martinwaldmeier.com](https://phishdestroy.io/domain/exchange.martinwaldmeier.com/) | 2026-05-04 | Online | 1API | [exchange.putunesimbah.de](https://phishdestroy.io/domain/exchange.putunesimbah.de/) | 2026-04-27 | Online | — | [gmx-account.pages.dev](https://phishdestroy.io/domain/gmx-account.pages.dev/) | 2026-04-24 | Offline | Cloudflare | [test.eddx.io](https://phishdestroy.io/domain/test.eddx.io/) | 2026-04-19 | Online | GoDaddy.com | [gmx-interface-with-etherspot-prime-sdk.pages.dev](https://phishdestroy.io/domain/gmx-interface-with-etherspot-prime-sdk.pages.dev/) | 2026-04-14 | Online | Cloudflare | [edgex-exchanger.com](https://phishdestroy.io/domain/edgex-exchanger.com/) | 2026-04-11 | Offline | GoDaddy.com | [eng-exchange.wixstudio.com](https://phishdestroy.io/domain/eng-exchange.wixstudio.com/) | 2026-04-05 | Online | Wix Studio | [gmxauthe.vercel.app](https://phishdestroy.io/domain/gmxauthe.vercel.app/) | 2026-04-04 | Offline | Vercel | [xires.weebly.com](https://phishdestroy.io/domain/xires.weebly.com/) | 2026-03-29 | Offline | Safenames | [gmxfreemailxde.weebly.com](https://phishdestroy.io/domain/gmxfreemailxde.weebly.com/) | 2026-03-22 | Offline | Safenames | [exchanges.lat](https://phishdestroy.io/domain/exchanges.lat/) | 2026-03-15 | Offline | PublicDomainRegistry.com | [dashboard-gmx.xyz](https://phishdestroy.io/domain/dashboard-gmx.xyz/) | 2026-03-14 | Online | Dynadot | [freemeingmx.weebly.com](https://phishdestroy.io/domain/freemeingmx.weebly.com/) | 2026-03-01 | Offline | Safenames | [gmxxdes.weebly.com](https://phishdestroy.io/domain/gmxxdes.weebly.com/) | 2026-02-26 | Offline | Squarespace Domains II | [trx-exchanger.us](https://phishdestroy.io/domain/trx-exchanger.us/) | 2026-02-26 | Online | Web Commerce Communications | [gmxxdde.weebly.com](https://phishdestroy.io/domain/gmxxdde.weebly.com/) | 2026-02-26 | Offline | Safenames | [exchange.mercuryo.io](https://phishdestroy.io/domain/exchange.mercuryo.io/) | 2026-02-19 | Online | GoDaddy.com | [dtx-exchange.com](https://phishdestroy.io/domain/dtx-exchange.com/) | 2026-02-16 | Online | NiceNIC | [glllx.xyz](https://phishdestroy.io/domain/glllx.xyz/) | 2026-02-13 | Unknown | NiceNIC | [bexchange.ru](https://phishdestroy.io/domain/bexchange.ru/) | 2026-02-07 | Offline | REGRU-RU | [dienstgmx.weebly.com](https://phishdestroy.io/domain/dienstgmx.weebly.com/) | 2026-02-07 | Taken down | Squarespace Domains II | [gixa.weebly.com](https://phishdestroy.io/domain/gixa.weebly.com/) | 2026-02-04 | Taken down | Squarespace Domains II | [gmxdex.live](https://phishdestroy.io/domain/gmxdex.live/) | 2026-01-25 | Offline | Web Commerce Communications | [gmxgxde.weebly.com](https://phishdestroy.io/domain/gmxgxde.weebly.com/) | 2026-01-20 | Taken down | Squarespace Domains II | [ale.weebly.com](https://phishdestroy.io/domain/ale.weebly.com/) | 2026-01-20 | Taken down | Squarespace Domains II | [gmx-login-web.weebly.com](https://phishdestroy.io/domain/gmx-login-web.weebly.com/) | 2026-01-20 | Offline | Squarespace Domains II | [gmxmainde.weebly.com](https://phishdestroy.io/domain/gmxmainde.weebly.com/) | 2026-01-20 | Taken down | Squarespace Domains II | [gmxdexxvz.weebly.com](https://phishdestroy.io/domain/gmxdexxvz.weebly.com/) | 2026-01-20 | Taken down | Squarespace Domains II | [gmxdenetdienst.weebly.com](https://phishdestroy.io/domain/gmxdenetdienst.weebly.com/) | 2026-01-20 | Taken down | Squarespace Domains II | [system-gmx.net](https://phishdestroy.io/domain/system-gmx.net/) | 2026-01-04 | Taken down | Porkbun | [4xexchange.com](https://phishdestroy.io/domain/4xexchange.com/) | 2026-01-03 | Taken down | Web Commerce Communications | [exchanges.network](https://phishdestroy.io/domain/exchanges.network/) | 2025-12-23 | Taken down | PublicDomainRegistry.com | [All 51 GMX reports](https://phishdestroy.io/domain/?brand=GMX) ## Where they are registered and hosted ### Registrars - [Squarespace Domains II](https://phishdestroy.io/registrar/squarespace/)9 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)3 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)3 - Cloudflare3 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)3 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)2 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)2 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)25 - [.dev](https://phishdestroy.io/tld/dev/)5 - [.app](https://phishdestroy.io/tld/app/)2 - [.live](https://phishdestroy.io/tld/live/)2 - [.xyz](https://phishdestroy.io/tld/xyz/)2 - [.io](https://phishdestroy.io/tld/io/)2 - [.tv](https://phishdestroy.io/tld/tv/)2 - [.network](https://phishdestroy.io/tld/network/)1 ### Hosting networks - Cloudflare, Inc.11 - CLOUDFLARENET - Cloudflare, Inc., US6 - WEEBLY, US5 - Weebly, Inc.5 - WEEBLY - Weebly, Inc., US3 - CLOUDFLARENET, US2 - Google LLC2 - AMAZON-02, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is GMX; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/gmx/