vavadajet[.]com

On July 24, 2026, the domain vavadajet.com was examined following its removal from public availability. The domain was registered through NameSilo, LLC on July 28, 2025 and is configured to use the Cloudflare nameservers fish.ns.cloudflare.com and hasslo.ns.cloudflare.com. No TLS certificate is presented; the site resolves to the IPv4 address 176.97.79.105, which belongs to AS58061 Scalaxy B.V. and is geolocated to the Netherlands. The page title returned from the host is “Games – VAVADA Online”, which does not reference the targeted brand, yet the domain is classified as a brand‑impersonation campaign targeting Camelot.

VirusTotal records indicate that one of ninety‑five security vendors flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme suspicion. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service. No SSL/TLS configuration and the low trust score suggest that the infrastructure was likely provisioned for a short‑lived malicious operation. At the time of analysis the site was offline, and the exact malicious payload or credential‑harvesting mechanism has not been captured.

Defenders should continue to monitor the associated IP address and ASN for re‑use, enforce blocklisting of 176.97.79.105 in perimeter defenses, and consider adding vavadajet.com to internal threat‑intel feeds. Additional scrutiny of any future DNS records or TLS certificates issued for this domain is recommended to detect potential re‑activation. The lack of publicly available content means that attribution beyond the observed infrastructure remains uncertain.