mistrkredit[.]cz

Analysis of mistrkredit.cz, registered on February 21 2026, shows an active generic phishing infrastructure with a high risk rating. The site returns HTTP 200 and presents the page title “Našel Jsem To”. DNS resolution points to IP 162.19.138.4, hosted in Germany under AS16276 (OVH SAS). The domain uses a Let’s Encrypt certificate (E8) and is served by Nginx, with additional client‑side components including Microsoft Advertising, Google Tag Manager, Google Hosted Libraries, Google Font API, Google Analytics, and Facebook Pixel. MX records are configured with mx1.active24.com (priority 10) and mx2.active24.com (priority 20), and the authoritative nameservers are gama.ns.active24.sk, beta.ns.active24.cz, and alfa.ns.active24.cz. Reputation scoring is extremely low (Gridinsoft 0/100) and the domain appears on two security blocklists, currently blocked by PhishDestroy and Enkrypt. VirusTotal scans report four detections out of 93 vendors. While the exact phishing payload and target audience have not been publicly disclosed, the combination of a fresh registration, low trust score, active web service, and multiple security vendor flags indicates a deliberate malicious operation. Defenders should block the domain and its IP at perimeter defenses, add the address to internal threat feeds, monitor for related DNS queries, and consider sinkholing the host to disrupt future activity. Continuous re‑evaluation is advised as additional indicators may emerge.