waowux[.]com

The domain waowux.com was registered on 27 February 2026 through NiceNIC International Group Co., Limited and resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) located in the United States. The authoritative nameservers are aurora.ns.cloudflare.com and kellen.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s CDN and DDoS‑mitigation service. No TLS certificate was observed, and the site currently returns an offline HTTP status, confirming that the malicious page has been taken down. The page title captured from the live site reads “Waowux: Most Popular Online Crypto Casino Based on Blockchain,” and the threat is classified as a crypto‑related scam.

Analysis of the payload matches the publicly known “Gambler Scam” phishing kit, which is commonly used to lure victims into depositing cryptocurrency with a fake online casino interface. VirusTotal scans show that five of ninety‑three antivirus and URL‑reputation engines flagged the domain, reinforcing the malicious rating. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, providing additional evidence of its phishing nature. The combination of a recent registration date, Cloudflare hosting without TLS, and the use of a gambling‑themed kit suggests a short‑lived, opportunistic campaign targeting cryptocurrency users.

Uncertainty remains regarding the volume of victim interaction before the takedown, as no public traffic statistics or victim reports have been disclosed. Defenders should continue to block the domain at perimeter filters, update URL reputation lists, and monitor for any resurgence of the Gambler Scam kit on other domains. Because the domain is hosted on Cloudflare, any future re‑hosting attempts could inherit the same IP range, so alerts should be tuned to the 188.114.96.0/24 subnet.