valpet[.]top

This domain, valpet.top, is identified as an active credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the infrastructure is designed to mimic legitimate authentication portals, capturing sensitive credentials such as usernames, passwords, and potentially multi-factor authentication codes. The domain remains operational as of the latest verification, posing an immediate threat to individuals and organizations unaware of its malicious intent. Infrastructure analysis reveals valpet.top was registered on June 01, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with abusive domain registrations. The domain resolves to the IP address 91.227.114.14, a host with a history of supporting phishing campaigns. Security vendor assessments on VirusTotal show 3 of 95 engines flagging the domain as malicious, a low detection rate that may indicate evasion techniques or recent deployment. The site lacks an SSL certificate, increasing the likelihood of interception during credential transmission. Current blocklist monitoring indicates the domain appears on one security blocklist, though this number may underrepresent its actual risk due to delayed detection or limited sharing. The domain’s continued activity and minimal detection footprint suggest it remains effective in evading automated defenses. Organizations and individuals are advised to block traffic to 91.227.114.14 and valpet.top at the network perimeter. Endpoint protection should be updated to include this domain and IP in deny lists. Users who may have interacted with the site should immediately reset credentials for any accounts accessed during the exposure window. Network logs should be reviewed for connections to the IP or domain, particularly those involving POST requests to login endpoints. Given the domain’s recent registration and low detection rate, heightened vigilance is recommended for similar infrastructure emerging from the same registrar or IP range.