gmxdexxvz[.]weebly[.]com

The domain gmxdexxvz.weebly.com is identified as a brand impersonation threat targeting the GMX brand. As of the latest assessment, the domain is offline. This report provides a detailed technical analysis of the domain, including its threat type, current status, and associated infrastructure.

Analysis indicates that gmxdexxvz.weebly.com was flagged by 18 out of 95 security vendors on VirusTotal, suggesting a notable level of suspicion. The domain was registered through Squarespace Domains II LLC and resolves to the IP address 74.115.51.8, which is located in the United States and belongs to AS27647 Weebly, Inc. The domain was created on February 21, 2026, and appears on one security blocklist. The SSL certificate is issued by Let's Encrypt, which is a common provider for legitimate and malicious sites alike, and has an identifier E8. The page title found on the domain is 'gmx.de', further indicating an attempt to impersonate the GMX brand.

The domain gmxdexxvz.weebly.com is currently offline, which may be due to takedown efforts by security organizations or the domain owner. Despite its offline status, the elevated risk level remains due to the previous detection counts and the nature of the threat. To mitigate potential risks, it is recommended that users avoid visiting or interacting with this domain. Security teams should monitor for any resurrection of the domain and consider adding it to internal blocklists to prevent accidental access. Additionally, organizations should educate their users on recognizing brand impersonation attempts and reporting such incidents to the appropriate security channels.