luwau[.]com

luwau.com is currently active and has been identified as a phishing domain by 13 out of 91 vendors on VirusTotal. This level of detection indicates a significant threat level, as multiple security vendors recognize its malicious nature. The domain is also listed on one public blocklist, specifically PhishDestroy's, underscoring its potential risk to users.

Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, luwau.com is hosted on the IP address 188.114.96.3. The domain's creation date is notably set in the future, on May 24, 2026, which is an unusual characteristic and could signify an error or an attempt to obfuscate its origins. This anomaly might be part of a tactic to evade detection or complicate tracking efforts by security professionals.

Despite its future creation date, the domain is active and operational, which suggests it is part of a sophisticated phishing operation. The combination of its active status, multiple VirusTotal detections, and presence on a public blocklist points to a well-coordinated effort to deceive users. Phishing domains like luwau.com often exploit the time lag between domain registration and widespread detection by antivirus databases, making early identification crucial for prevention.