r[.]co

This domain was registered on April 03 2026 and currently resolves to IP address 52.20.84.62 hosted on AWS EC2 infrastructure in the US region. It presents an SSL certificate issued by Let's Encrypt under the R12 profile and returns an HTTP status code of 302. The domain remains active with a recorded page title of R.CO — Premium Domain For Sale | Atom. Analysis indicates the site is listed under the generic_phishing threat category with an assigned high risk level.

Intelligence sources show the domain appears on one security blocklist and has been referenced in six AlienVault OTX threat pulses. VirusTotal reports detections from 1 out of 95 vendors while the Gridinsoft trust score stands at 0 out of 100. These indicators align with the active status and the flagged threat classification without contradicting the registration timeline from early 2026.

What remains uncertain is the precise nature of any redirected content after the observed 302 response since direct page inspection data beyond the recorded title is not available. No additional ASN or vendor-specific kit details are provided in the current records. The combination of low trust metrics and blocklist presence supports continued monitoring but does not confirm operational payload details.

Defenders should block the domain r.co at network and endpoint layers and monitor traffic to the associated IP 52.20.84.62 for related indicators. Cross-reference new sightings against the existing six OTX pulses and the single blocklist entry to maintain accurate detection rules. Regular re-evaluation of the domain status is advised given its ongoing active classification.