vavadasgk[.]site

This domain, vavadasgk.site, is identified as a brand impersonation phishing site targeting Camelot, a recognized gaming and lottery platform. The page title, 'Games - VAVADA Online,' mimics legitimate gaming portals to deceive users into engaging with fraudulent content. No specific drainer kit or credential-harvesting payload has been confirmed, but the domain’s structure and branding align with known impersonation tactics used to exploit user trust in established entities. Infrastructure analysis reveals the domain was registered on October 08, 2025, through Atak Domain, a registrar frequently associated with low-reputation registrations. It resolves to the IP address 104.21.89.92, a Cloudflare-associated endpoint commonly used to obfuscate hosting origins. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist, and no Google Safe Browsing (GSB) detections are currently recorded. The domain has been taken offline, reducing immediate risk to end users. However, historical infrastructure and registration patterns suggest the operators may re-deploy similar domains. Organizations should monitor for newly registered domains using the same registrar or resolving to the identified IP. Users are advised to verify domain authenticity before interacting with gaming or lottery platforms, particularly those using unfamiliar branding or recently registered domains.