portfolio-valantis[.]xyz

This domain, portfolio-valantis.xyz, is flagged as a fake login phishing site. No specific brand impersonation or drainer kit has been identified, but the domain's creation and resolution patterns, along with its detection by multiple security vendors, suggest it was used to trick users into revealing sensitive information such as login credentials.

Infrastructure analysis reveals that portfolio-valantis.xyz has a VirusTotal score of 12/95, indicating that 12 out of 95 security vendors have flagged this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.97.3. The domain was created on March 27, 2026, and it currently has a Gridinsoft trust score of 0/100, highlighting a complete lack of trustworthiness. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. According to AlienVault OTX, the domain has been referenced in one threat intelligence pulse, further confirming its association with phishing activities.

The domain is currently offline, which suggests that it may have been taken down in response to detection and reporting by security vendors. Despite this, the elevated risk level remains due to the high number of security vendors flagging the domain and its presence on a security blocklist. Organizations and individuals are advised to remain vigilant and avoid any links or communications related to this domain. Further monitoring and analysis should be conducted to ensure that the domain does not reappear or that similar domains are not being used for the same purpose.