Valorant

Gaming United Statesplayvalorant.comRank 185 of the most impersonated
Cert findings · 24 h
3
Cert findings · 7 days
11
1 reported or listed · 10 on phishing hosts
Registered lookalikes
21
2 listed by a source or an address list
Official domains
20
verified from Valorant's own sites and records

Certificate findings for Valorant

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Valorant's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 12 findings, grouped by hostname

  1. valorantstore.net NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    valorantstore.net
    First seen
    2026-11-05 08:59 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.92.104.122.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.92.104.122
    Brand
    Valorant
    Addresses
    212.92.104.122 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    208.115.249.236 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    valorantstore.net
    Registered
    2022-02-18 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  2. valorant-tracker.com NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    valorant-tracker.com
    First seen
    2026-11-05 08:59 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.92.104.9.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.92.104.9
    Brand
    Valorant
    Addresses
    212.92.104.9 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    192.157.56.141 · Canada · AS55286 SERVER-MANIA - B2 Net Solutions Inc.
    Domain
    valorant-tracker.com
    Registered
    2021-10-21 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  3. valorant-event.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    valorant-event.com
    First seen
    2026-11-04 15:41 UTC
    First published
    2026-11-04 16:54 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 17:06 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-06 13:36 UTC to 2026-12-05 14:36 UTC
    Logged 2026-11-04 15:40 UTC in DigiCert Wyvern2026h2, entry 2,203,888,866
    SHA-256 9c69626f4532250c4a80a20aba0928f4555d18b5ee7af83b1cf6e0c0ec9a9475
    Public key SHA-256 24d386659c69f8e87ee915a7c9bb937fd7e496c948575826ed04f7533ea20ba1
    PhishDestroy
    Brand
    Valorant
    Addresses
    104.21.91.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5b7b
    2606:4700:3035::ac43:da66
    Cloudflare
    Cloudflare (104.21.91.123, 172.67.218.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    valorant-event.com
    Registered
    2025-11-29 · OwnRegistrar, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:55 UTC

    Suggest a correction

  4. www.valorant-sale.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.valorant-sale.ru
    First seen
    2026-10-31 17:21 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 16:18 UTC to 2027-01-29 16:17 UTC
    Logged 2026-10-31 17:16 UTC in Google ParcelYard2027h1, entry 542,310,583
    SHA-256 8ff430ff86acba9bd8f83c15f31d4dc38ae702f8565ac4858f12de7d2c04ff35
    Public key SHA-256 70df4137ebbb74b63e8451fb2b6460a0ae868bda2df4f2cfa9364e36c23b02e9
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant-sale.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  5. valorant-sale.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    valorant-sale.ru
    First seen
    2026-10-31 17:21 UTC
    First published
    2026-10-31 17:58 UTC
    DNS
    Resolves · checked 2026-11-04 18:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 16:18 UTC to 2027-01-29 16:17 UTC
    Logged 2026-10-31 17:16 UTC in Google ParcelYard2027h1, entry 542,310,583
    SHA-256 8ff430ff86acba9bd8f83c15f31d4dc38ae702f8565ac4858f12de7d2c04ff35
    Public key SHA-256 70df4137ebbb74b63e8451fb2b6460a0ae868bda2df4f2cfa9364e36c23b02e9
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant-sale.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  6. www.playvalorant.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    www.playvalorant.pl
    First seen
    2026-10-31 08:16 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 07:11 UTC to 2027-01-29 07:11 UTC
    Logged 2026-10-31 08:10 UTC in Google PlumbersArms2027h1, entry 536,402,481
    SHA-256 c4b6f31b564f90bb6c4e7e262edacbc8c6d7a93b75a7c878d95eb0fbd24da68e
    Public key SHA-256 0733ab2e1f2500c7c230589dbfede903f9769f6772dd02046d49e88e81bdb53f
    Brand
    Valorant
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    playvalorant.pl
    Registered
    2026-05-18 · Aftermarket.pl Limited
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  7. playvalorant.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 6 mo ago
    DetailsHide
    Hostname
    playvalorant.pl
    First seen
    2026-10-31 08:16 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.253.212.22
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 07:11 UTC to 2027-01-29 07:11 UTC
    Logged 2026-10-31 08:10 UTC in Google PlumbersArms2027h1, entry 536,402,481
    SHA-256 c4b6f31b564f90bb6c4e7e262edacbc8c6d7a93b75a7c878d95eb0fbd24da68e
    Public key SHA-256 0733ab2e1f2500c7c230589dbfede903f9769f6772dd02046d49e88e81bdb53f
    Brand
    Valorant
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    Domain
    playvalorant.pl
    Registered
    2026-05-18 · Aftermarket.pl Limited
    MX
    Receives mail at blackhole.aftermarket.pl
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  8. www.valorant-store.su AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.valorant-store.su
    First seen
    2026-10-31 06:32 UTC
    First published
    2026-10-31 07:17 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 05:29 UTC to 2027-01-29 05:29 UTC
    Logged 2026-10-31 06:27 UTC in Let's Encrypt Sycamore2027h1, entry 867,272,857
    SHA-256 a5b370ec5e9c096857f38b4800133ec565e304e414ad7a8bb40fc5f6098a74c7
    Public key SHA-256 72e276b6ba9d65d9c52822f143cb609e1d203a73f47b02aa2a3cfa3bca7f3604
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant-store.su
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  9. valorant-store.su AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    valorant-store.su
    First seen
    2026-10-31 06:32 UTC
    First published
    2026-10-31 07:17 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 05:29 UTC to 2027-01-29 05:29 UTC
    Logged 2026-10-31 06:27 UTC in Let's Encrypt Sycamore2027h1, entry 867,272,857
    SHA-256 a5b370ec5e9c096857f38b4800133ec565e304e414ad7a8bb40fc5f6098a74c7
    Public key SHA-256 72e276b6ba9d65d9c52822f143cb609e1d203a73f47b02aa2a3cfa3bca7f3604
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant-store.su
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  10. www.valorant.skin AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www.valorant.skin
    First seen
    2026-10-30 09:31 UTC
    First published
    2026-10-30 09:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 08:27 UTC to 2027-01-28 08:27 UTC
    Logged 2026-10-30 09:26 UTC in Let's Encrypt Willow2027h1, entry 847,150,680
    SHA-256 749d2e1c75eb11982218663bca18fb491cc3cb58c05fde00c557df47a6e3f1dc
    Public key SHA-256 bf5b0a1a581c92186f47ebf8dbd52b94b1e72c2a62a430400e2acc2f388ca57b
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant.skin
    Registered
    2021-03-11 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:44 UTC

    Suggest a correction

  11. valorant.skin AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    valorant.skin
    First seen
    2026-10-30 09:31 UTC
    First published
    2026-10-30 09:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 190.115.22.211.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 190.115.22.211
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-30 08:27 UTC to 2027-01-28 08:27 UTC
    Logged 2026-10-30 09:26 UTC in Let's Encrypt Willow2027h1, entry 847,150,680
    SHA-256 749d2e1c75eb11982218663bca18fb491cc3cb58c05fde00c557df47a6e3f1dc
    Public key SHA-256 bf5b0a1a581c92186f47ebf8dbd52b94b1e72c2a62a430400e2acc2f388ca57b
    Brand
    Valorant
    Addresses
    190.115.22.211 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    valorant.skin
    Registered
    2021-03-11 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:44 UTC

    Suggest a correction

  12. valorant1004.deno.net US · AS15329 · Deno
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    valorant1004.deno.net
    First seen
    2026-10-27 09:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.67.170.170.
    1. Phishing-host list fetched with the address
    2. Resolved to 69.67.170.170
    3. Latest DNS check
    Certificate
    Logged in DigiCert Sphinx2027h1, entry 283,470,791
    SHA-256 7e88314e39eb31d608432351e11f84f14c045cce7477f11839c1714f8c016804
    Brand
    Valorant
    Addresses
    69.67.170.170 · United States · AS15329 DENO - Deno

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Valorant when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Gaming

All brands →