hitt-mixer[.]de

The domain www.hitt-mixer.de was registered on 21 February 2026 through Netcup.de and resolves to the IPv4 address 193.31.25.197, which is assigned to AS197540 (Netcup GmbH) in Germany. The site presents an HTTP 200 response and serves a valid Let’s Encrypt R13 TLS certificate, with HSTS enabled. Automated analysis shows a Gridinsoft trust score of 0 / 100 and a single vendor detection on VirusTotal (1 of 93 security vendors flagged the domain). The page title returned by the server is “HITT Mixer”. Infrastructure fingerprints reveal a Debian operating system running Apache HTTP Server, and the domain is listed on one public blocklist. PhishDestroy has already added the host to its blocklist, indicating active mitigation by at least one anti‑phishing service. While the exact content of the page has not been examined, the combination of a newly created domain, low trust score, TLS configuration typical of phishing kits, and the presence on a blocklist strongly suggests a phishing operation. Defenders should immediately add www.hitt-mixer.de to deny‑lists, enforce DNS sinkholing or firewall rules to block outbound connections, and monitor for any related subdomains or IP addresses. Continuous re‑evaluation is advised in case additional detections appear or the site’s content changes.