valovictory[.]com

The domain valovictory.com is currently offline but exhibits a set of indicators consistent with a generic phishing operation targeting the Valorant brand. The site was registered on April 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 186.2.171.13, which is hosted by Iqweb LLC in Belize. DNS resolution uses the authoritative nameservers ns71.cloudns.net and ns72.cloudns.com. The web server presented an SSL certificate issued by Let’s Encrypt (R13), indicating that HTTPS was available at the time of observation.

HTTP response headers included HSTS and the traffic was protected by DDoS-Guard, while the application stack was identified as Node.js running Express with Tailwind CSS for front‑end styling. Gridinsoft assigned a trust score of 0 out of 100, and the domain is listed on a single security blocklist. It has been actively blocked by the PhishDestroy service. VirusTotal analysis shows that 1 of 94 scanning engines flagged the domain, reinforcing the suspicion of malicious intent.

The page title returned by the server was "Valorant Limited Edition Wiki," suggesting an attempt to masquerade as an official source for Valorant content. Although the site is not presently reachable, the combination of a recent registration, low trust score, low‑profile hosting, use of a generic TLS certificate, and detection by multiple security products warrants an elevated risk rating. Defenders should add valovictory.com and its resolving IP 186.2.171.13 to network blocklists, monitor for any re‑appearance, and ensure that endpoint protection solutions are updated to flag the domain. Continuous observation of DNS changes and any future SSL or content modifications is recommended to detect potential re‑activation.