securityawareness[.]cc

securityawareness.cc is actively engaged in a credential theft phishing campaign as of seed 0248e3. The domain mimics legitimate security awareness portals to deceive users into submitting login credentials. PhishDestroy identifies this as a high-risk threat due to its active status and use of impersonation tactics.

This domain was flagged by 12 of 95 VirusTotal vendors, indicating it has not yet been widely detected by security tools. The domain resolves to IP 32.194.4.181, was registered through Gandi SAS on October 24, 2019, and has appeared on 1 security blocklist. The SSL certificate was issued by Amazon, adding an appearance of legitimacy. Despite these tactics, the domain remains unflagged by most antivirus engines at this time.

The domain remains active and poses a moderate but evolving risk to users who may interact with it. Immediate action is required: block the domain and IP at the network level, monitor for user reports of credential submissions, and update security awareness training to highlight this specific threat. Users should avoid engaging with unsolicited emails or links related to securityawareness.cc. Security teams are advised to review logs for any past interactions with this domain as part of incident response efforts.