riotmm[.]com

This domain, riotmm.com, is a confirmed phishing site targeting users with a fraudulent VALORANT VCT Champions giveaway. The site mimics official VALORANT promotions, tricking visitors into submitting account credentials, payment details, or personal information under the guise of a prize claim. The threat primarily involves credential harvesting, with potential secondary risks including malware distribution or financial fraud through fake verification processes. Users are typically lured via social media ads, direct messages, or compromised gaming forums linking to the domain. Analysis indicates the domain was registered on April 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, an uncommon creation date that may suggest domain spoofing or typosquatting tactics. Infrastructure review shows it resolves to the IP address 186.2.171.13 and employs Node.js with Express, alongside DDoS-Guard for protection, which is frequently used to obscure malicious infrastructure. The domain appears on one security blocklist and is flagged by 16 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100, confirming its malicious intent. If you visited riotmm.com, immediately revoke any entered credentials, especially for VALORANT or Riot Games accounts. Run a full antivirus scan to detect potential malware or keyloggers. Monitor linked financial accounts for unauthorized transactions and enable multi-factor authentication on all gaming and email accounts. Report the domain to your security team or platform administrators to prevent further exposure. Avoid interacting with similar giveaway links unless verified through official Riot Games channels.