alwau[.]com

On July 23, 2026, alwau.com was observed as an offline site that previously presented itself as “Alwau: Elon Musk’s Official Crypto Casino Powered by Blockchain.” The domain is registered through REALTIME REGISTER B.V. and was created on February 21, 2026. Infrastructure analysis shows the domain resolved to the IP address 104.21.48.103, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate was observed, indicating the site was served over plain HTTP. The page title explicitly references Elon Musk and a cryptocurrency casino, aligning with the reported scam type of a crypto scam.

Threat intelligence vendors have flagged the domain. VirusTotal reports 14 of 93 security scanners labeling alwau.com as malicious. The domain is listed on one external security blocklist and is actively blocked by PhishDestroy. Reputation services assign low trust scores: Scamadviser rates the domain 26 out of 100, while Gridinsoft assigns a score of 1 out of 100. The observed payload matches the “Gambler Scam” phishing kit, a known package used to lure victims into fraudulent gambling or crypto investment schemes.

Because the site is currently offline, direct content inspection is not possible, and the exact payload delivered to visitors cannot be confirmed beyond the kit attribution. Nevertheless, the combination of a deceptive page title, low reputation scores, multiple vendor detections, and inclusion on blocklists provides strong evidence that alwau.com was used for a targeted crypto‑casino phishing campaign impersonating Elon Musk.

Defenders should continue to block the domain at network perimeters and update URL filtering feeds. Incident responders who encounter traffic to alwau.com should collect DNS query logs, HTTP request headers, and any client‑side artifacts that may reveal the underlying phishing kit.