portal-gos[.]ru-petishion[.]com

This report analyzes the domain portal-gos.ru-petishion.com. The page title, "This Page Does Not Exist," indicates the site is no longer serving content, but its structure suggests it was designed to impersonate a Russian state services portal (gos.ru) through a deceptive subdomain. The threat posed by this site is phishing, as it likely aimed to harvest login credentials or personal data from users seeking government services.

Technical analysis reveals significant malicious indicators. VirusTotal detected the domain as malicious by 10 out of 95 security vendors, including ADMINUSLabs, CRDF, CyRadar, Fortinet, and Gridinsoft. The site is hosted on IP address 2a02:4780:44:2be6:f934:197a:890c:fd54 in Germany, associated with ASN AS47583 (Hostinger International Limited). The domain was created on 2026-02-21 and uses an SSL certificate from certificate authority R13. The domain also appears on one blocklist.

The domain is currently down or offline. Despite this, the risk level remains high based on available data. GridinSoft assigns a trust rating of 0 out of 100, and the Domain Risk Score is 73, indicating a high probability of malicious activity. The site is no longer accessible, but the infrastructure and detection history confirm it was a threat.