riotbest[.]com

This domain, riotbest.com, was identified as a credential phishing site targeting users of the popular tactical shooter Valorant. The site presented itself as a "Valorant Limited Edition Wiki," a common tactic to lure players into entering login credentials, payment details, or downloading malicious files under the guise of exclusive in-game content or rewards. Such phishing pages often mimic official branding, including logos, fonts, and color schemes, to appear legitimate and deceive users into disclosing sensitive information. Given the popularity of Valorant, this type of social engineering is particularly effective against gamers seeking early access to new skins, beta tests, or limited-time offers. Analysis indicates that riotbest.com was registered on April 06, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED, a registrar frequently associated with high-risk domains due to its lenient registration policies and offshore jurisdiction. The domain resolved to the IP address 186.2.171.13, a host previously linked to other phishing campaigns targeting gaming communities. At the time of assessment, 19 out of 95 security vendors on VirusTotal flagged riotbest.com as malicious, with detections categorized under generic phishing or fraud. The site was also listed on one security blocklist and has since been taken offline, though the infrastructure may resurface under a different domain or IP. Users who visited riotbest.com should assume their credentials or payment information may have been compromised. Immediate steps include changing passwords for Valorant accounts, enabling multi-factor authentication, and monitoring financial statements for unauthorized transactions. If login details were entered, revoke access to any linked third-party services and scan the device for malware using updated security tools. Avoid clicking on links in unsolicited messages, even if they appear to originate from official gaming platforms. Verify the authenticity of any Valorant-related offers by accessing content directly through the publisher’s website or in-game client rather than external links.