gmdev-redirbase[.]xyz

The domain gmdev-redirbase.xyz was registered on July 20, 2026 through Unstoppable Domains Inc. and remains active as of the report date, July 21, 2026. It is hosted on the IP address 45.9.148.81 and uses Cloudflare DNS services, specifically the nameservers anastasia.ns.cloudflare.com and thaddeus.ns.cloudflare.com. Infrastructure analysis shows a typical fast‑flux‑style setup, with Cloudflare providing both DNS resolution and likely CDN protection, which can obscure the true origin of the payload server. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one anti‑phishing organization has identified it as malicious. VirusTotal records show that one of ninety‑five scanning engines flagged the domain, providing an additional independent indication of suspicious activity. No public SSL/TLS certificate details, HTTP status codes, or page title information are presently available, limiting the ability to assess the surface‑level content or the specific brand being impersonated. Consequently, the exact phishing campaign vector and targeted brand remain uncertain. Given the high risk rating, defenders should add gmdev-redirbase.xyz to network‑level blocklists, enforce DNS filtering for the domain, and monitor outbound connections to the associated IP address. Continuous re‑scanning of the domain on multi‑engine platforms is recommended to capture any changes in payload or additional detections. Organizations employing email security gateways should also flag any messages containing links to this domain for quarantine or removal.