vivada[.]icu

This domain, vivada.icu, was registered on 29 August 2025 through Web Commerce Communications Limited. Infrastructure analysis shows the domain resolves to the IPv4 address 176.97.79.105, which belongs to AS58061 (Scalaxy B.V.) located in the Netherlands. The authoritative name servers are fish.ns.cloudflare.com and hasslo.ns.cloudflare.com, indicating use of Cloudflare DNS services. No TLS certificate is present, and the site does not respond over HTTPS, confirming the lack of encrypted transport.

The page title returned by the live check was “Games – VAVADA Online,” which does not reference the targeted brand. However, threat intelligence flags the domain as a brand‑impersonation campaign targeting the Camelot brand. The domain appears on a single security blocklist and has been added to the PhishDestroy blocklist. VirusTotal scans recorded two positive detections out of ninety‑five submitted antivirus engines, corroborating the malicious classification.

The site is currently listed as offline, and no further content has been captured. Defenders should add vivada.icu to network deny lists, monitor the associated IP address for any re‑use, and watch for re‑registration of the domain. Continued observation of Cloudflare name‑server activity and the AS58061 range is advised, as malicious actors may reuse the same hosting infrastructure for future campaigns. The combination of brand‑impersonation intent, low blocklist presence, and limited VirusTotal detections suggests a low‑profile operation that could be re‑activated; proactive blocking mitigates potential exposure.