kra45-at[.]gorizontpao[.]ru

This domain, kra45-at.gorizontpao.ru, is identified as a phishing site designed to mimic legitimate project management interfaces. The page title 'kra45 - AT управление проектами горизонта' suggests an attempt to impersonate a Russian-language project management portal, likely targeting corporate or organizational users. Such sites typically aim to harvest login credentials, sensitive project data, or deploy malicious payloads under the guise of legitimate access. The absence of an SSL certificate further indicates a lack of basic security measures, increasing the risk of data interception during transmission. Analysis indicates this domain is registered through UK-WIN (ASN: 42237) and resolves to the IP address 193.105.134.30, located in Sweden under the same autonomous system. VirusTotal reports 11 out of 95 security vendors flagging the domain as malicious, while it appears on at least one security blocklist. The domain currently shows an offline status, though this does not eliminate the risk of reactivation or similar campaigns emerging from the same infrastructure. The registrar and hosting provider have been associated with other phishing activities, reinforcing the elevated risk classification. Users who visited kra45-at.gorizontpao.ru should immediately revoke any entered credentials, particularly if reused across other platforms. Monitor accounts linked to the affected email or credentials for unauthorized access or unusual activity. If corporate systems were accessed, notify internal security teams to assess potential data exposure. Consider scanning devices for malware, as phishing sites often redirect to exploit kits or download malicious files. Report the domain to relevant security teams or threat intelligence platforms to aid in broader mitigation efforts.