system-gmx[.]net

This domain, system-gmx.net, is flagged as a brand impersonation threat specifically targeting users of the email service GMX. The domain presents a fake login page titled 'GMX Sicherheit' designed to harvest credentials from unsuspecting visitors. The threat is classified as elevated risk due to its clear intent to deceive users into entering sensitive account information.

Evidence from threat intelligence confirms the domain was registered through Porkbun LLC on December 28, 2025, and resolves to IP address 91.92.34.66. VirusTotal analysis shows 4 out of 95 security vendors flag this domain as malicious. It appears on 1 security blocklist and has a Gridinsoft trust score of 0 out of 100. AlienVault OTX records the domain in 1 threat intelligence pulse, further corroborating its malicious nature. The SSL certificate is server-side, indicating the page may have been served over HTTPS to appear legitimate. The domain is currently offline and has been blocked by PhishDestroy.

Users who visited system-gmx.net and entered any credentials should immediately change their GMX account passwords and enable two-factor authentication if available. Monitor for any unauthorized access attempts or suspicious emails from the compromised account. Run a full antivirus scan on any device used to access the domain. Report any phishing attempts to GMX support and consider placing a fraud alert on financial accounts if any payment information was entered.