vctlegacy[.]com

The domain vctlegacy.com has been identified as a phishing scam targeting fans of the popular game Valorant, operating under the guise of a "Valorant Limited Edition Wiki." This domain is currently offline, but during its active period it posed a significant risk to users who may have been lured into providing personal information or credentials under false pretenses. The site masqueraded as an official resource for limited edition content, a common tactic used by threat actors to exploit the trust of gaming communities.

Security analysis reveals that vctlegacy.com was flagged by 19 out of 95 security vendors on VirusTotal, indicating widespread detection across the cybersecurity industry. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with less reputable domains. It resolved to the IP address 186.2.171.13 and used an SSL certificate issued by Let's Encrypt (R13), which, while legitimate, does not guarantee the site's safety. Additionally, the domain appeared on one security blocklist and was found in one threat intelligence pulse on AlienVault OTX, further confirming its malicious nature.

Given that the domain is now offline, the immediate threat has diminished, but users should remain cautious. PhishDestroy recommends that anyone who may have visited vctlegacy.com or entered any personal information should change their passwords immediately and monitor their accounts for suspicious activity. It is crucial to only access official gaming websites directly through known URLs and to avoid clicking on links from unsolicited messages or forums. Staying informed about common phishing tactics can help prevent falling victim to similar scams in the future.