Riot Games

Gaming United Statesriotgames.comOperator of Valorant
Cert findings · 24 h
1
Cert findings · 7 days
3
2 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
98
7 listed by a source or an address list
Official domains
2
verified from Riot Games's own sites and records

Certificate findings for Riot Games

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Riot Games's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 3 findings, grouped by hostname

  1. r.mail.leagueoflegends-bg.info FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 3 y ago
    DetailsHide
    Hostname
    r.mail.leagueoflegends-bg.info
    First seen
    2026-11-04 16:47 UTC
    First published
    2026-11-04 18:05 UTC
    DNS
    Resolves · checked 2026-11-04 18:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 15:44 UTC to 2027-02-02 15:44 UTC
    Logged 2026-11-04 16:42 UTC in Google PlumbersArms2027h1, entry 611,822,158
    SHA-256 91d5bdfe0be13aa86687a7a9c38e797acbf45de9800e034f9835725afcf99110
    Public key SHA-256 7a635bdf7b6d0c36dfb4a007bcb666b9e9106418d2b733de42f139d662907a92
    Brand
    Riot Games
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    leagueoflegends-bg.info
    Registered
    2024-01-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.leagueoflegends-bg.info
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 16:58 UTC

    Suggest a correction

  2. riotgames.ws US · AS6461 · Zayo Bandwidth
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    riotgames.ws
    First seen
    2026-11-03 20:12 UTC
    First published
    2026-11-03 20:36 UTC
    DNS
    Resolves · checked 2026-11-04 20:44 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.92.243.12.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.92.243.12
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 91.92.243.12.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 91.92.243.12
    3. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-03 19:10 UTC to 2027-02-01 19:10 UTC
    Logged 2026-11-03 20:08 UTC in Google PlumbersArms2027h1, entry 596,711,939
    SHA-256 8893c96272f45438d87a7df3b1403cdeb33a20058b89a887f87125b400605363
    Public key SHA-256 51aa4f4d26ecb5fbc76e76c73c65dc5af692c2593499f9da0c1f468c86d87d8c
    Brand
    Riot Games
    Addresses
    91.92.243.12 · United States · AS6461 ZAYO-6461 - Zayo Bandwidth
    Domain
    riotgames.ws
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Riot Games when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Gaming

All brands →