api[.]gama[.]vavadabacks[.]com

The domain api.gama.vavadabacks.com was registered on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows that the site presented a page title of "Google," matching the declared brand impersonation and credential‑phishing classification. The domain is present on a single security blocklist and has been explicitly blocked by PhishDestroy, indicating that at least one reputable anti‑phishing service has taken action against it.

VirusTotal records show that one out of ninety‑three scanning engines flagged the domain, reinforcing the suspicion of malicious intent despite the low detection count. The SSL certificate associated with the site is identified as "WE2," a detail that does not correspond to a trusted certificate authority and further reduces confidence in the site’s authenticity. Gridinsoft’s trust scoring system assigned a score of 0 out of 100, confirming the domain’s extreme risk profile.

No additional intelligence such as ASN, hosting IP, or geographic data is available in the current dataset. Defenders should continue to enforce blocklist rules that include this domain, ensure that URL filtering solutions deny traffic to it, and monitor for any future re‑registration or resurrection of the host. Because the site is already offline, immediate remediation focuses on preventing accidental access and updating security policies to reflect the confirmed Google impersonation and credential‑phishing behavior.