deepmi5t[.]ru

As of July 19, 2026, the domain deepmi5t.ru is classified as a high-risk, active phishing threat. VirusTotal reports that 14 out of 91 security vendors have flagged this domain, indicating broad recognition across the threat intelligence community. The domain resolves to IP address 188.114.96.3 under CloudFlare, Inc., and is currently serving a 301 HTTP status. The SSL certificate is issued by Google Trust Services (WE1). The site's page title reads 'deepmi5t.ru | 521: Web server is down', which suggests that the web server may be intermittently unavailable, but the domain itself remains active. Deepmi5t.ru appears on one security blocklist and is blocked by PhishDestroy. AlienVault OTX associates this domain with one threat intelligence pulse. No specific brand impersonation or phishing kit details are present in the available intelligence, and the exact content delivered by the site is not yet analysed. Defenders should treat this domain as a credible phishing infrastructure based on multi-source detection and blocklist presence, and ensure it is proactively blocked in enterprise environments. Continued monitoring is recommended to identify any shifts in content or targeting patterns.