daddy938s[.]space

The domain daddy938s.space is an active brand impersonation threat specifically targeting Camelot, a popular online casino brand. This domain was created on October 13, 2025, and its page title, "Daddy Casino — Играй только в лучшие игры! Рекордные выигрыши вместе с нами!", is designed to lure users with promises of record winnings. As of now, the domain is offline, but its brief period of activity posed a risk to users who might have been tricked into providing personal or financial information.

Technical analysis reveals that daddy938s.space resolves to IP address 104.21.23.29 and was registered through Atak Domain. VirusTotal flags this domain with a score of 7 out of 95 security vendors, indicating a moderate level of detection. It also appears on one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. Notably, the domain lacks an SSL certificate, which is a red flag for any legitimate site handling sensitive data. These indicators collectively suggest that the site was set up for malicious purposes, likely to steal login credentials or financial information from unsuspecting users.

Although the domain is currently offline, users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with daddy938s.space immediately change their passwords and monitor their accounts for suspicious activity. To verify the legitimacy of any casino or gambling site, always use trusted verification tools like PhishDestroy before entering personal information. If you have already fallen victim, report the incident to your financial institution and local cybercrime authorities. Remember, legitimate casinos never ask for sensitive information through unsolicited links or pop-ups.