valres[.]top

This domain, valres.top, is flagged as a high-risk generic phishing threat targeting users through fraudulent payment portals. Analysis indicates no association with a known brand or drainer kit, but its infrastructure mimics legitimate checkout pages to harvest financial credentials, including credit card details and login tokens. The lack of SSL encryption further increases exposure risk for intercepted data during transmission. Infrastructure analysis reveals the following technical indicators: VirusTotal detection score of 1/95 security vendors, registration through PDR Ltd. d/b/a PublicDomainRegistry.com, resolution to IP address 91.227.114.14, and a creation date of June 01, 2026. The domain appears on one security blocklist and is currently blocked by a specialized phishing detection system. No Google Safe Browsing (GSB) flags were observed at the time of analysis. The domain remains active as of this report, posing an ongoing risk to users encountering it through phishing campaigns or malvertising. Recommended response actions include immediate blocking of the domain and IP at network perimeter controls, along with monitoring for related indicators of compromise (IOCs) such as HTTP referrers or associated subdomains. Given the high-risk classification and active status, organizations should prioritize user awareness training to recognize phishing tactics, particularly those involving fake payment pages. The anomalous creation date (2026) suggests potential domain squatting or registry manipulation, warranting further investigation into the registrar's abuse handling procedures.