dep53h[.]com

PhishDestroy identifies dep53h.com as an active credential phishing domain designed to mimic Microsoft 365 login portals, targeting enterprise users for account takeover. This domain was flagged by internal threat intelligence systems on April 13, 2026, the same day it was registered through NameSilo, LLC. The site currently resolves to IP 188.114.96.3 and is secured with a Let’s Encrypt SSL certificate, increasing its authenticity and lowering user suspicion during credential entry. Technical analysis reveals zero detections on VirusTotal (1/95 engines) as of the latest scan, indicating this domain remains under the radar of most automated security tools. Its recent creation date and clean reputation suggest opportunistic deployment targeting users expecting valid login interfaces. The combination of a newly registered domain, low detection rate, and SSL obfuscation makes this a high-risk phishing vector likely used in spear-phishing campaigns against organizations relying on cloud services. Users who visited dep53h.com should immediately check browser history for unexpected redirects or downloads. If any credentials were entered, change passwords on all associated accounts immediately and enable multi-factor authentication. Report the domain to your organization’s security team and use a reputable DNS blocklist to prevent further access. Monitor accounts for unusual login activity and enable account recovery alerts.