valoko[.]pro

The domain valoko.pro was registered on May 01, 2026 through Global Domain Group LLC and is presently taken offline. VirusTotal records indicate that six of ninety‑five security vendors flagged the domain, providing early indication of malicious activity. The site employed a Let's Encrypt R12 certificate, which does not inherently convey trust, and its Gridinsoft trust score is 0 out of 100, reflecting a lack of reputation. Infrastructure analysis shows the domain resolves to the IP address 186.2.171.13, hosted in Belize by Iqweb LLC, and is served by nameservers ns71.cloudns.net, ns72.cloudns.com, ns73.cloudns.net, and ns74.cloudns.uk.

Detected web technologies include Node.js, Express, HSTS, and DDoS‑Guard, suggesting a modern server stack possibly used to evade simple takedown attempts. The page title "VALORANT VCT Champions Giveaway" and the classification of the campaign as a "Fake Airdrop" align with the identified phishing kit labeled "Giveaway Scam," indicating the operators are attempting to lure victims with a purported Valorant championship giveaway. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy, demonstrating that at least one remediation service has taken action.

Impersonation of the brand "phantom" is noted, though the exact nature of the brand relationship is limited to the provided intelligence. Defenders should continue to monitor the IP 186.2.171.13 for any re‑activation, enforce blocking of the domain at perimeter filters, and update endpoint protections with the observed detection signatures. Given the combination of low trust scores, vendor detections, and confirmed blocklist presence, the domain should be treated as high‑risk and excluded from user‑accessible networks.