# gxmuseum.com — SUSPICIOUS

> gxmuseum.com is under investigation for phishing risks. Domain offline but flagged on blocklists. Stay alert and avoid interacting with this site.

## Summary
PhishDestroy identifies gxmuseum.com as a potentially malicious phishing domain currently under investigation. The domain’s risk level remains unconfirmed, but its classification as generic phishing warrants caution. Despite no direct detections from VirusTotal, the domain exhibits suspicious attributes that merit attention.

The domain was registered recently on March 11, 2026, through eName Technology Co., Ltd., and has appeared on three separate security blocklists. It resolves to the IP address 38.182.198.115, which is associated with uncertain infrastructure. Although VirusTotal scans show zero detections from 95 security vendors, its presence on multiple blocklists and prompt removal from the web suggest it was involved in suspicious activity.

Currently, gxmuseum.com is offline, reducing immediate risk to users. It is recommended to avoid accessing the domain or any related content due to ongoing investigation. Users and security teams should remain vigilant for updates and consider the domain unsafe until further analysis confirms its status.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: http://www.gxmuseum.com/

## Domain Intelligence
- Registered: 2026-03-11 17:07:02
- Registrar: eName Technology Co., Ltd.
- Country: GB
- IP: 38.182.198.115
- IP Country: HK
- IP City: Harmony Garden
- IP Org: AS140224 Nebula Global LLC
- Nameservers: ["ns1.judns.com", "ns2.judns.com"]
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce648-235d-7068-af16-b84be2c2455e.png
- PhishDestroy: https://phishdestroy.io/domain/gxmuseum.com/
- LLM endpoint: https://phishdestroy.io/domain/gxmuseum.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gxmuseum.com/
Last updated: 2026-03-19