gmdexai.xyz
Category: Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gmdexai.xyz
gmdexai.xyz appears to present itself as a cryptocurrency and decentralized-finance platform focused on token swaps, liquidity pools, and cross-chain bridging on the Base network. The page title and on-page text describe "Autonomous AI Swaps & Liquidity on Base," with features such as wallet connection, swap execution, liquidity management, and an AI trading assistant. Based on the visible content, the site is positioned as a DeFi interface rather than a general informational website.
The domain name combines crypto-style branding with "AI," which may be intended to suggest automated trading or smart routing features. The site references Base and Aerodrome-related liquidity routing in its marketing copy, but the scan data provided does not identify a clearly established company, legal entity, or independently verified operator behind the service. Given the financial and wallet-connected nature of the offering, visitors would typically be expected to exercise additional caution and verify project legitimacy through independent sources.
Safety Assessment for gmdexai.xyz
At the time of this scan, the domain was flagged by 9 out of 91 security engines, with several classifying it as malicious, phishing, or malware-related. In contrast, the page-level malware scan did not identify flagged files, and major content-malice and phishing databases listed in the scan results did not report detections at that moment. This mixed picture can occur with newly registered domains, but the multi-engine detection count is still a meaningful caution signal.
Additional context increases uncertainty: the domain is only 13 days old, has no established traffic ranking, and presents a wallet-connected financial service involving crypto swaps and bridging. Newly created financial domains can carry elevated risk because they have had little time to build reputation, and users may be prompted to connect wallets or approve transactions. While no malicious files were detected in the page scan and blacklist checks were clean at the time of review, the combination of youth, financial functionality, and multiple security-engine flags suggests visitors should be careful.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is hosted on Vercel infrastructure, with nameservers pointing to ns1.vercel-dns.com and ns2.vercel-dns.com. The resolved server IP is 216.198.79.1, located in Atlanta, United States, and the certificate was valid at the time of the scan. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From the crawl data, the site appears to be a modern JavaScript-based web application with Next.js-style static chunk assets. No flagged files, malicious external links, or iframe issues were identified in the page scan itself. The main technical concerns are therefore not obvious exploit artifacts, but rather the domain's very recent registration, limited reputation history, and the fact that multiple security engines had already flagged it at the time of scanning.
Share your experience with this website. Was it safe? Did you encounter any issues?