# valorant-santiago.lat — SUSPICIOUS

> Phony Valorant giveaway site valorant-santiago.lat lures gamers with fake prizes. Users risk malware or credential theft.

## Summary
PhishDestroy identifies valorant-santiago.lat as an active fake giveaway scam impersonating Riot Games’ Valorant to harvest user credentials and deliver malware. The domain masquerades as an official regional contest page promising exclusive in-game items or accounts, a common social engineering tactic targeting gaming communities. Initial VirusTotal scans show zero detections out of 95 engines, indicating it has evaded automated detection thus far, while the domain resolves to IP 104.21.94.237 and uses a Let’s Encrypt SSL certificate to appear legitimate.  This domain was flagged under the generic phishing category and remains under investigation, with a risk level currently marked as under_investigation. Key technical indicators include a recent creation date of March 18, 2026—just days ago—as registered through Global Domain Group LLC, a known domain reseller that facilitates low-friction malicious registrations. The SSL certificate issuance and clean VirusTotal score suggest this campaign is either newly launched or deliberately low-volume to avoid early detection. Given the lack of blocklist coverage and minimal detection, the threat is likely evolving and may expand rapidly as the actors refine their lures.  Users who accessed valorant-santiago.lat should immediately cease any interaction, avoid entering credentials or downloading files, and scan their devices using updated antivirus software. If login credentials were entered, change passwords immediately on all accounts using the same credentials and enable multi-factor authentication where available. Report the domain to your security team or via platforms like PhishDestroy to help block further propagation. Monitor financial accounts and gaming profiles for unauthorized activity. Block the domain at the network level if possible to prevent others from falling victim.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 18:58:27
- Registrar: Global Domain Group LLC
- IP: 104.21.94.237

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2fc1741f-2220-44da-b042-719e282b6925
- PhishDestroy: https://phishdestroy.io/domain/valorant-santiago.lat/
- LLM endpoint: https://phishdestroy.io/domain/valorant-santiago.lat/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/valorant-santiago.lat/
Last updated: 2026-03-21