stormpixei[.]ru

Analysis of stormpixei.ru as of July 19, 2026 shows an active generic phishing infrastructure. The domain resolves to 172.67.179.219, an address owned by Cloudflare, Inc. in Canada, and presents a valid SSL certificate issued by Google Trust Services under the WE1 certificate authority. HTTP requests return status 200 and the page title is observed as “Nexa Meet – видеовстречи для рабочих команд”, indicating a possible misuse of a collaboration‑meeting service name. The site is listed on one security blocklist and is explicitly blocked by the PhishDestroy feed. VirusTotal has recorded 16 detections out of 91 scanners, confirming malicious classification by multiple vendors. The domain is currently flagged as high risk and remains active. Uncertainty remains regarding the specific payload or credential‑stealing mechanisms employed, as no additional content analysis is available. Defenders should block traffic to stormpixei.ru at the network perimeter, update endpoint URL filtering rules, and monitor for any authentication attempts to services that may be impersonated by the page title. Continuous re‑evaluation is recommended in case additional indicators emerge.