mail[.]remittix-rtx[.]com

The domain mail.remittix-rtx.com was created on February 21, 2026 and is currently listed as offline. DNS resolution points to the IPv4 address 91.234.195.113, which is announced by ASN AS210403 owned by Groupe LWS SARL and geolocated to France. An SSL certificate associated with the host carries an R10 rating, indicating a low trust level. The only publicly observed page element is the title "Connexion," which provides no further insight into the content or targeted brand.

Malware and phishing analysis services have evaluated the domain: VirusTotal recorded 10 positive detections out of 93 scanned security vendors, and the domain is present on a single security blocklist. PhishDestroy has explicitly blocked the domain, and Gridinsoft assigns it a trust score of 0 out of 100, reinforcing the malicious classification. The campaign is labeled as social media phishing and receives an elevated risk rating. While the limited data set does not reveal the specific social platform being spoofed, the combination of a recent registration, low‑trust SSL, multiple vendor detections, and blocklist presence suggests a purposeful attempt to harvest credentials.

Defenders should add the domain and its resolving IP to perimeter and DNS blocklists, monitor for any resurgence of the host, and enforce strict URL filtering for any connections to the IP address. Additional forensic collection, such as full page capture and HTTP header inspection, would be required to clarify the exact phishing vector and any associated payloads. Until the infrastructure is fully dismantled, continued vigilance is recommended to prevent credential compromise.