aware-cr1[.]com

aware-cr1.com was registered through TUCOWS.COM, CO on July 07, 2026. The domain resolves to the IP address 172.67.189.7 and utilizes Cloudflare nameservers karl.ns.cloudflare.com and raina.ns.cloudflare.com. Since its creation, the domain has appeared on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis shows that 13 of 91 scanning engines flag the domain as malicious, indicating a moderate consensus of compromise.

The current threat classification is generic phishing, and the domain remains active as of the report date, August 02, 2026. The available evidence does not include a page title, SSL certificate details, HTTP response codes, or any observed traffic patterns, so the specific content hosted on the site cannot be confirmed. Nevertheless, the combination of recent registration, Cloudflare hosting, blocklist presence, and multiple vendor detections suggests an infrastructure deliberately used for phishing campaigns.

Defenders should consider adding 172.67.189.7 to network deny lists, enforce DNS filtering for aware‑cr1.com, and monitor for any outbound connections to the domain. Continuous re‑scanning with VirusTotal and additional sandbox analysis are recommended to capture any evolving payloads. Organizations employing email security gateways should update phishing signatures to include this domain and its associated IP, and SOC teams should flag any authentication attempts directed at the domain for further investigation.