vvadatest[.]com

Analysis of vvadatest.com, observed on July 24, 2026, shows a domain that was created on July 06, 2025 and subsequently used to host a page titled "Games - VAVADA Online". The site was listed on a single security blocklist and was actively blocked by the PhishDestroy service, indicating that at least one security organization identified it as malicious. VirusTotal scans recorded a single positive detection out of 95 participating vendors, reinforcing the suspicion of illicit activity. The domain resolves to IP address 176.97.79.105, which resides in the Netherlands and is advertised as belonging to AS58061 (Scalaxy B.V.).

Both authoritative name servers, fish.ns.cloudflare.com and hasslo.ns.cloudflare.com, are Cloudflare managed, a common choice for fast‑changing phishing infrastructure. No SSL/TLS certificate was presented, meaning traffic to the site was unencrypted, a characteristic often observed in hastily deployed phishing pages. The current operational status is offline, and no active HTTP response can be retrieved, limiting direct content analysis. The registrar listed as "mat bao corporation" provides no additional reputation signals.

While the page title suggests a gaming‑related theme, no further evidence about the specific lure or credential‑harvesting mechanisms is available. defenders should continue to block the domain and its associated IP at perimeter defenses, monitor for any re‑registration attempts, and consider updating URL filtering lists to include the observed nameservers and IP range. Ongoing observation is advised in case the infrastructure is repurposed for a new campaign.