Is xsso.riotgames.com a scam?

Our automated security review found no threat indicators on xsso.riotgames.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is xsso.riotgames.com safe to use?

xsso.riotgames.com passed our automated security checks with a trust score of 96/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does xsso.riotgames.com have a valid SSL certificate?

Yes. xsso.riotgames.com presents a valid TLSv1.3 certificate issued by IdenTrust · HydrantID Server CA O1, expiring in 158 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the xsso.riotgames.com domain?

xsso.riotgames.com is 21.6 years old, registered on 11/11/2004 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has xsso.riotgames.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report xsso.riotgames.com as clean.

Is xsso.riotgames.com on any phishing or malware blacklists?

No. xsso.riotgames.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is xsso.riotgames.com hosted?

xsso.riotgames.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the xsso.riotgames.com report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is xsso.riotgames.com legit or a scam?

Name: Is xsso.riotgames.com legit or a scam?
Item: xsso.riotgames.com
Rating: 5
Author: MalwareTips

Our verdict:Safe· 96/100

SafeSuspiciousDangerous

Official Riot Games SSO subdomain for Valorant and League of Legends authentication with clean scans and no malicious signals.

Why we trust it

Subdomain of 21-year-old official riotgames.com domain Zero detections across our antivirus network and browser blocklists Actively referenced in Riot's own login redirects for Valorant and LoL

xsso.riotgames.comScanned 4d ago

Post Facebook

Trust score

SAFE

Heuristics 98·MT 95

Category tags

authenticationofficial-subdomain95% MT confidence

Positive signals (5)

Antivirus clear Not on major blacklists Domain is 22 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

22 years old

Registered Nov 11, 2004

MT Intelligence

Safe

Low likelihood · 95% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust95/100

MT AgentLive web researchVisual inspection

Confidence

The domain is a direct subdomain of riotgames.com, the official site of the well-known game publisher, and is actively referenced in Riot's own authentication redirects. All security checks returned clean results with zero flags from antivirus engines or blocklists. The parent domain is over 21 years old and the IP shows no abuse history. Visual inspection confirms it serves legitimate auth endpoints rather than any deceptive content. Technical complaints on forums mention occasional login delays but contain zero reports of scams or fraud.

Full dossier

Analysis complete

Page Content

Hosts official Riot Sign On (RSO) authentication endpoints including session checks and iframe handlers used by Valorant and League of Legends clients.

Infrastructure

Valid SSL certificate, clean hosting IP with zero abuse reports, and routes through Cloudflare anycast network shared with other Riot subdomains.

Domain History

Parent domain riotgames.com is 21 years old and registered through MarkMonitor; this specific subdomain has been part of Riot's OAuth system for years.

Web Reputation

No scam reports located; only technical login complaints appear on Reddit with no fraud mentions. Tracked by SimilarWeb as part of Riot's infrastructure.

Positive Signals

Subdomain of 21-year-old official riotgames.com domain
Zero detections across our antivirus network and browser blocklists
Actively referenced in Riot's own login redirects for Valorant and LoL
Valid SSL certificate with no abuse reports on the hosting IP
No clone indicators or scam mentions in web research

AI Recommendation

This is a legitimate Riot Games authentication service. You can safely use it for official logins.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

xsso.riotgames.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

No visual red flags

No scam visual patterns detected

Standard security block page from a legitimate service protecting riotgames.com subdomain; no scam indicators present.

Visual risk0/100

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for xsso.riotgames.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

21 yrs

Registered Nov 2004

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 complaints

Key findings

7 headline facts from open-web research

- xsso.riotgames.com is a subdomain of riotgames.com (Riot Games official domain, ~21 years old)
- Direct pages exist: https://xsso.riotgames.com/check-session-iframe ('Check Session IFrame') and https://xsso.riotgames.com/riot-owned-iframe ('Riot Owned IFrame')
- Used in official Riot auth flows: referenced in redirects with client_id=prod-xsso-playvalorant, prod-xsso-leagueoflegends etc. on authenticate.riotgames.com
- Similar subdomains (xsso.playvalorant.com, xsso.leagueoflegends.com) associated with Valorant/LoL apps and Cloudflare anycast IPs
- Part of Riot Sign On (RSO) OAuth/SSO system per Riot developer docs
- Reddit posts report technical login issues (e.g. 'xsso.riotgames.com took too long to respond', protocol errors) but no scam/fraud mentions
- Tracked by SimilarWeb; resolves via Cloudflare; no scam or clone reports found in searches

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for xsso.riotgames.com and didn't find scam reports or complaints. Technical login issues appear on Reddit but contain no fraud mentions.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History

Age22 years old

RegistrarMarkMonitor Inc.

RegisteredNov 11, 2004

ExpiresNov 11, 2026

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerIdenTrust · HydrantID Server CA O1

ExpiresNov 7, 2026 (158d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on xsso.riotgames.com and not a lookalike like x-sso.riotgames.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review found no threat indicators on xsso.riotgames.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Final Verdict

Trust / 100

Final Verdict·xsso.riotgames.com

SAFE

xsso.riotgames.com is an official Riot Games authentication subdomain used for player logins. Our analysis finds clean security scans, a 21-year-old parent domain, and no scam indicators. Users can safely proceed with Riot login flows.

This is a legitimate Riot Games authentication service. You can safely use it for official logins.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

woocommerce-1093796-5896757.cloudwaysapps.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.