vavadatap[.]com

The domain vavadatap.com is a confirmed phishing site engaged in brand impersonation, specifically targeting the camelot brand. It presents itself as a gaming or online service platform under the title 'Games - VAVADA Online' but operates as a fraudulent scheme to deceive users. No crypto drainer kit was identified in this campaign. As of the latest verification, vavadatap.com has been taken offline, though its prior activity remains a risk for those who may have interacted with it.

Technical analysis of vavadatap.com reveals limited but notable detection. The domain is flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned it a trust score of 0/100. It appears on one security blocklist, PhishDestroy, and is not flagged by Google Safe Browsing. Registered through Atak Domain on September 26, 2025, the domain resolves to the IP address 176.97.79.105, hosted by Scalaxy B.V. in the Netherlands (AS58061). No SSL certificate is present, and the nameservers are eugene.ns.cloudflare.com and faye.ns.cloudflare.com.

Users who visited vavadatap.com should take immediate action to secure their accounts. If login credentials were entered, change passwords for the affected service and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand, camelot. Additionally, victims may report the domain to their local cybercrime unit or platforms like the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.