valgritey[.]co

valgritey.co was registered on 9 June 2024 through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to 188.114.96.3, an address owned by Cloudflare (AS13335) located in the United States. The site is protected by a Cloudflare‑issued ECC TLS certificate issued to “SSL Corporation”. The page title returned by the server is “Valgritey”. Infrastructure analysis shows the domain is served behind Cloudflare, using Bootstrap, Cloudflare Browser Insights and HTTP/3, indicating a modern web stack but also providing anonymity for the operator.

VirusTotal has recorded 12 detections out of 95 scanners, and the domain is listed on four public blocklists, with additional blocks from PhishDestroy, Polkadot, Enkrypt and Codeesura. Gridinsoft assigns a trust score of 0 / 100, further confirming malicious reputation. The domain is explicitly reported to impersonate the brand “avalanche” and is categorized as a crypto‑scam, although the exact content of the site has not been disclosed beyond the title. The current status is active and the nameservers clara.ns.cloudflare.com and tanner.ns.cloudflare.com confirm continued use of Cloudflare DNS.

Defenders should treat any traffic to valgritey.co as hostile, enforce network‑level blocks, and consider sinkholing the IP if possible. Continuous monitoring of the associated IP range (188.114.96.0/24) is recommended because Cloudflare assets may host additional abusive domains. Because the site leverages Cloudflare’s edge network, direct takedown may be limited; escalation to the hosting provider and request for removal of malicious content is advisable. Visibility into the payload or phishing pages remains uncertain, so threat‑intel teams should collect snapshots of the site when possible and share indicators of compromise with downstream security solutions.