vavadagame77[.]fun

The domain vavadagame77.fun was registered on 13 October 2025 through Atak Domain and is currently hosted on Cloudflare infrastructure (IP 104.21.44.76, AS13335, United States). It resolves to two Cloudflare authoritative name servers, eugene.ns.cloudflare.com and faye.ns.cloudflare.com, and does not present an SSL/TLS certificate, indicating that HTTPS connections are not secured. The site title returned by HTTP requests is “Games - VAVADA Online”, which does not directly reference the targeted brand, but threat intelligence attributes the domain to a camelot brand impersonation campaign. VirusTotal analysis shows that 7 of 95 scanners flagged the domain as malicious, and the domain appears on one external blocklist, where it is listed by PhishDestroy.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence in malicious intent. AlienVault OTX has referenced the domain in a single pulse, further corroborating its association with threat activity. The domain has been taken offline as of the report date, July 24 2026, and no SSL certificate or active content is observable.

Defenders should block resolution of vavadagame77.fun at network perimeters, add the IP address 104.21.44.76 to deny lists, and monitor for any future re‑registration attempts. Continued observation of Cloudflare‑hosted assets linked to this domain is recommended, as the infrastructure could be reused for other impersonation campaigns. At present, the lack of live content limits deeper behavioral analysis, so further investigation should focus on historic traffic logs and any residual artifacts that may reveal the campaign’s payload or command‑and‑control endpoints.