vavadavin[.]sbs

Analysis of vavadavin.sbs indicates this domain is a phishing site targeting users of the VAVADA online casino brand. The domain was registered on February 21, 2026, through Web Commerce Communications Limited and is hosted on infrastructure associated with elevated risk. It resolves to IP address 176.97.79.105, located in the Netherlands under AS58061 (Scalaxy B.V.), a network previously linked to fraudulent activity. The domain uses Cloudflare nameservers (fish.ns.cloudflare.com and hasslo.ns.cloudflare.com), which can obscure hosting details and complicate takedown efforts.

The page title, 'Games - VAVADA Online,' explicitly references the VAVADA brand, suggesting an intent to deceive users into believing the site is a legitimate casino platform. As of July 22, 2026, the domain is offline, likely following its inclusion on the PhishDestroy blocklist. Three out of 95 security vendors on VirusTotal have flagged the domain, reinforcing its classification as malicious. The SSL certificate is issued by R10, a low-assurance certificate authority often used in phishing campaigns to create a superficial appearance of legitimacy.

No evidence currently links this domain to a specific phishing kit or advanced evasion techniques. However, the combination of brand impersonation, recent registration, offshore hosting, and detection by multiple security vendors confirms its fraudulent purpose. Defenders should treat this domain as a confirmed phishing threat and maintain its blocklist status. Organizations operating in the online gambling sector are advised to monitor for similar impersonation attempts and implement proactive domain monitoring to detect lookalike domains targeting their brand.