gymmaxfitness[.]com

Analysis of gymmaxfitness.com indicates that the domain is currently active and has been classified as a generic phishing infrastructure. The registration record shows that the domain was created on July 14, 2015 and is registered through GoDaddy.com, LLC using the authoritative name servers ns23.domaincontrol.com and ns24.domaincontrol.com. DNS resolution points exclusively to the IPv4 address 103.143.230.103. The IP address is listed on a single security blocklist, and the domain appears on the PhishDestroy blocklist, confirming that defensive feeds have already taken action to block traffic to the host.

VirusTotal scanning results show that one out of ninety‑one anti‑malware engines flagged the domain, indicating that at least one vendor has identified malicious behavior associated with the host. No additional public threat‑intel sources such as OTX or Google Safe Browsing are referenced in the available data, and the page title or any observed landing‑page content has not been disclosed, leaving the exact phishing lure unknown. The combination of an aged domain, a dedicated IP address, and inclusion on a phishing‑specific blocklist suggests an operational phishing campaign, likely leveraging the domain to harvest credentials or deliver malicious payloads.

Because the domain is still active, security teams should continue to enforce network‑level blocks against 103.143.230.103 and add gymmaxfitness.com to URL filtering policies. Email gateways should be configured to deny messages that reference this domain, and incident response teams should monitor for any authentication attempts or credential submissions directed to the host. Threat intel platforms should update their observables to include the domain, its registrar, and the associated IP, ensuring that downstream security products can automatically apply the appropriate mitigations.