gamevavada[.]com

Analysis of gamevavada.com indicates a confirmed brand impersonation campaign targeting the Camelot gaming brand. The domain was registered on June 11, 2025 through Hello Internet Corp and is currently taken offline. DNS resolution points to IP address 176.97.79.105, which is hosted in the Netherlands and is owned by AS58061 Scalaxy B.V. The domain uses Cloudflare nameservers fish.ns.cloudflare.com and hasslo.ns.cloudflare.com, but does not present an SSL certificate, leaving HTTP traffic unencrypted. The site’s page title, "Games - VAVADA Online," does not reference the impersonated brand, suggesting the landing page may have been altered or removed prior to takedown.

Reputation scoring from Scamadviser assigns a trust score of 47 out of 100, reflecting moderate risk. Security monitoring tools have flagged the domain on a single blocklist, and PhishDestroy has listed it as blocked. VirusTotal analysis shows that one out of ninety‑five scanned security vendors reported the domain as malicious, providing independent confirmation of its illicit nature. The combination of a recent registration date, lack of TLS, and association with a known phishing blocklist aligns with typical infrastructure patterns used in brand‑impersonation attacks.

Defenders should immediately block DNS resolution for gamevavada.com and its associated IP 176.97.79.105, enforce outbound filtering to prevent connections to the host, and monitor the Cloudflare nameservers for any re‑registration attempts. Continuous observation of threat intelligence feeds for reappearance of the domain or related indicators is recommended, as the offline status may be temporary. Attribution remains limited to the observed infrastructure; no further details about payloads, credential‑harvesting mechanisms, or compromised accounts are available at this time.