valoepic[.]com

On July 25, 2026, analysis of the domain valoepic.com identified a short‑lived phishing infrastructure that has been taken offline. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolves to the IPv4 address 186.2.171.13, which is announced by AS59692 owned by IQWeb FZ‑LLC and geolocated to Belize (BZ). No TLS certificate is presented; the site served HTTP only, which is consistent with the lack of an SSL certificate in the collected metadata. The page title returned by the server was “Valorant VP for You”, indicating an attempt to lure users with a reference to the popular game Valorant. The hosting provider’s nameservers are ns01.serverspace.io and ns02.serverspace.io, both typical of generic hosting services.

Reputation scoring from Gridinsoft assigned a trust score of 1 out of 100, and the domain appears on a single security blocklist. Independent scanning on VirusTotal recorded nine detections out of ninety‑three AV engines, confirming that multiple security products consider the host malicious. The domain is also listed as blocked by the PhishDestroy feed, which further corroborates its classification as a phishing site. No safe‑browsing verdict, OTX indicator, or additional public intelligence was observed.

The limited time between registration and takedown suggests a rapid‑deployment campaign, likely intended to harvest credentials related to the Valorant brand. Because the site is no longer reachable, active exploitation cannot be confirmed, but the presence of a recognizable page title, low trust score, multiple AV detections, and blocklist listings provide strong evidence of malicious intent. Defenders should continue to block the domain at perimeter and DNS layers, monitor the IP address 186.2.171.13 for any residual activity, and add the associated nameservers to watchlists.