vevocas[.]com

Analysis of vevocas.com indicates a confirmed phishing site targeting users of the VAVADA online casino brand, as evidenced by the page title 'Games - VAVADA Online' and multiple threat intelligence sources. The domain, registered on October 8, 2025, through MAT BAO CORPORATION, currently resolves to the IP address 194.145.208.100, hosted in the Netherlands under AS200514 (KnownSRV Ltd.). Infrastructure analysis reveals the use of Cloudflare nameservers (eugene.ns.cloudflare.com and faye.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. The absence of an SSL certificate further reduces user security, increasing the likelihood of credential interception.

Security vendors have flagged this domain, with 14 out of 95 engines on VirusTotal detecting malicious activity. It appears on one security blocklist and is referenced in a threat intelligence pulse on AlienVault OTX, confirming its classification as a phishing threat. The domain was blocked by PhishDestroy and is now offline, though defenders should remain vigilant for potential re-emergence under similar infrastructure or domains. The registration details and hosting provider align with patterns observed in other phishing campaigns, particularly those targeting online gambling platforms.

While the exact content of the site remains unanalyzed, the combination of the page title, detection by security vendors, and inclusion in threat intelligence feeds provides sufficient evidence to classify vevocas.com as a fraudulent site impersonating VAVADA Online. Defenders are advised to block the domain, IP address, and associated nameservers at the network level. Monitoring for newly registered domains with similar naming conventions or infrastructure is recommended to preempt further phishing attempts.