daddycas156[.]com

The domain daddycas156.com is an elevated-risk phishing site engaged in brand impersonation targeting the gambling sector, specifically mimicking the Camelot brand. This site was designed to deceive users into believing they were accessing a legitimate online casino, potentially leading to credential theft or financial fraud. No crypto drainer kit was identified. As of the latest verification, daddycas156.com has been taken offline.

Technical indicators confirm the malicious nature of daddycas156.com. The domain was registered on 2025-10-03 19:52:34 through Atak Domain and resolves to the IP address 194.145.208.100, hosted in the Netherlands under AS200514 KnownSRV Ltd. It appears on 1 security blocklist (PhishDestroy) and is flagged by 2 of 95 VirusTotal vendors, including CRDF and Gridinsoft, which assigned a trust score of 0/100. The site lacked an SSL certificate, and its nameservers are eugene.ns.cloudflare.com and faye.ns.cloudflare.com. The observed page title was 'Daddy Casino — Играй только в лучшие игры! Рекордные выигрыши вместе с нами!', reinforcing its gambling-themed scam.

Users who interacted with daddycas156.com should immediately change any passwords entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized transactions or account activity. If financial information was provided, contact the relevant institution to secure accounts. Report the domain to Google Safe Browsing, the registrar (Atak Domain), and local cybercrime authorities. Victims may also submit the domain to additional blocklists or threat-intelligence platforms to prevent further exploitation.