tarkovdrop[.]com

This domain, tarkovdrop.com, is assessed as a confirmed phishing site targeting players of the game Escape From Tarkov. Registered on December 20, 2025, through NiceNIC International Group Co., Limited, the domain resolves to IP 186.2.171.13, hosted under AS59692 (IQWeb FZ-LLC) in Belize. Nameservers are ns01.serverspace.ru and ns02.serverspace.ru, and no SSL certificate is present. The page title, 'Redeem Your Escape From Tarkov Reward Code For an In-Game Item - Tarkov,' explicitly indicates an attempt to deceive users into submitting credentials or payment details under the guise of in-game rewards.

Analysis reveals the domain is flagged by 7 of 93 security vendors on VirusTotal, appears in one AlienVault OTX threat intelligence pulse, and is listed on one security blocklist. It is currently blocked by PhishDestroy and was taken offline as of the report date. The Gridinsoft trust score of 0/100 further supports its malicious classification. No evidence of a phishing kit or additional infrastructure details is available, and the exact content or functionality of the site remains unanalyzed.

Defenders should treat this domain as a confirmed phishing threat targeting the Escape From Tarkov gaming community. Block the domain and IP 186.2.171.13 at perimeter security controls, and monitor for related indicators such as the nameservers or hosting provider. If internal logs show user interaction with this domain, initiate incident response procedures for credential compromise or financial fraud. No further infrastructure or campaign linkages are currently confirmed.