WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Hoyolab.com

Report Date October 13, 2025
Recommendation
Proceed
Overall Summary
Safe
Why we think so

Hoyolab.com is the official community forum for HoYoverse games, hosting millions of monthly visitors worldwide. It ranks around #1,200 globally and mainly serves players of popular games like Genshin Impact and Honkai Impact 3rd. The site uses reliable technologies from Amazon and Google and has no flags in major scam blacklists or trademark conflicts. While some users report account hacking and refund issues, these relate to in-game or account security problems rather than fraud by the website itself. HoYoverse has faced significant legal actions, including a $20 million FTC settlement over privacy violations, but the website is considered legitimate by multiple sources.

Confidence Score
83%

Risk Insights

🛡️

Strong Traffic and Infrastructure 🛡️

Ranks #1,208 globally with ~27 million monthly visits
Uses trusted cloud and analytics technologies like Amazon CloudFront and Google Analytics
No flags on major scam or phishing blacklists
🚨

Legal Scrutiny but No Scam 🚨

Resolved a $20 million FTC case over data privacy and loot boxes without admitting fraud
Has many IP enforcement legal cases, typical for game companies
User complaints mostly about account security, not website fraud

Contradictory Signals

While the site is legitimate and professionally managed, end-user account security issues create some negative experiences.

Signal A: High traffic and professional infrastructure

Signal B: User reports of account hacking and refund issues

Category Scores

Identity 85/100
Reputation 80/100
Technical 90/100
Content 75/100
Legal 70/100
Business Validity 85/100

Red Flags & Warnings

  • Users report account hacking and difficulties with account recovery leading to financial loss.

🔎 Detailed Checks & Analysis

Domain Age and Registrar

Score: 80/100
Passed

"Domain age is several years old, lowering risk of scam."

Reason: Domain registered since 2020 with a reputable registrar GoDaddy.com, LLC.

SSL Certificate Validity

Score: 10/100
Passed

"No current SSL issues detected, securing connections."

Reason: SSL certificate is valid and issued by GeoTrust, expiring 2025-11-10.

Blacklist and Scam Watches

Score: 10/100
Passed

"Absence from known scam and phishing lists reduces suspicion."

Reason: No blacklisting found in crypto scam or Google Safe Browsing databases.

Trademark Validity

Score: 10/100
Passed

"No impersonation risk identified."

Reason: No conflicting trademarks found in USPTO search for hoyolab.com.

Traffic Volume and Sources

Score: 90/100
Passed

"Strong, consistent user base indicating legitimate usage."

Reason: High monthly visits (~27M) with legitimate traffic sources, mainly direct and search.

Reputation and Scam Reports

Score: 80/100
Passed

"User complaints relate mainly to account security, not website fraud."

Reason: No credible fraud allegations against hoyolab.com domain found.

Legal and Customer Disputes

Score: 70/100
Passed

"Legal issues reflect regulatory scrutiny, not scam status."

Reason: FTC settlement and multiple legal actions noted but unrelated to website fraud.

Contact Information and Social Media Presence

Score: 70/100
Passed

"Presence on Facebook, Twitter, Instagram, and YouTube supports legitimacy."

Reason: Active official social media accounts linked, no suspicious contact details found.

Your Next Steps

  • 1
    Verify you are visiting the official hoyolab.com domain to avoid phishing attempts.
  • 2
    Use strong, unique passwords and two-factor authentication to protect your game accounts.
  • 3
    Be cautious of third-party sites and links claiming to offer game rewards or services.
  • 4
    Report any suspicious activity directly through HoYoverse customer support.
  • 5
    Consider reviewing FTC and legal notices regarding privacy practices when using HoYoverse services.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →