remit-tix[.]store

The domain remit-tix.store was registered on December 13 2025 through the HOSTINGER operations, UAB registrar. It resolves to the IPv6 address 2a02:4780:27:2158:0:1de6:5a72:7, which belongs to AS47583 Hostinger International Limited and is geolocated in France. Authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parked or temporarily hosted domains. No TLS certificate is presented for the site, indicating that HTTPS is not offered.

The only observable HTTP metadata is a page title of “Default page,” suggesting that the site is currently serving a generic placeholder rather than targeted content. VirusTotal analysis shows that six of ninety‑five scanned security vendors reported the domain as malicious, and the domain is listed on a single public blocklist. PhishDestroy has already taken the domain offline, and the current status is recorded as “offline.” Independent trust scoring assigns a score of 0 / 100 from Gridinsoft, reflecting a complete lack of trust. The domain appears on one security blocklist, reinforcing its classification as a phishing infrastructure.

Available evidence confirms the presence of a generic phishing infrastructure but provides no details on the specific lure, credential‑stealing page, or target brand. Consequently, the precise operational scope and victim profile remain unknown. Defenders should continue to block the domain at network perimeters, monitor for any resurgence of the underlying IP address or host, and verify that any internal references to remit‑tix.store are removed from allow‑lists. Ongoing telemetry collection from DNS logs and proxy feeds is recommended to detect any future re‑registration attempts or related indicators of compromise.