dienstgmx[.]weebly[.]com

This domain, dienstgmx.weebly.com, is flagged for brand impersonation targeting GMX, a widely used email service provider. Analysis indicates the site presents a fraudulent login interface under the page title 'gmx.de,' designed to harvest user credentials. The threat type is classified as credential theft through brand impersonation, with no evidence of a drainer kit or additional malicious payloads at this time. Infrastructure analysis reveals the domain was registered through Squarespace Domains II LLC on February 21, 2026, an anomalous future date suggesting potential falsification or misconfiguration. The domain resolves to IP address 74.115.51.8, hosted on autonomous system AS27647 (Weebly, Inc.) in the United States. VirusTotal detection metrics report 16 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt (serial number E8), a common tactic to lend legitimacy to phishing infrastructure. The domain appears on one security blocklist, though it is not currently listed in Google Safe Browsing. As of the latest assessment, dienstgmx.weebly.com has been taken offline, likely in response to abuse reports or automated takedown mechanisms. However, residual risk persists due to the potential for threat actors to re-deploy the infrastructure under a new domain or subdomain. Users who may have interacted with the site are advised to reset credentials for GMX and any other services where identical passwords were reused. Organizations should monitor for unauthorized access attempts originating from the identified IP range and consider implementing additional authentication measures for email services.