auspost[.]customerserviceb[.]com

This domain, auspost.customerserviceb.com, is actively engaged in credential theft operations targeting users through brand impersonation of Australia Post. The page displays a Dutch-language verification prompt, 'Verifieer dat u een mens bent' (Verify you are human), a common tactic to deceive users into entering sensitive information under the guise of a security check. No crypto drainer kit signatures were detected, but the domain’s infrastructure and behavioral patterns align with credential harvesting campaigns, particularly those targeting logistics and postal service customers. Analysis indicates the domain was registered on June 16, 2026, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 47.79.39.190 and is currently flagged by 18 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt (YE1), a certificate authority often exploited by threat actors due to its low-cost, automated issuance process. Google Safe Browsing (GSB) status is not explicitly provided, but the elevated risk level and vendor detections suggest it is likely classified as malicious. The domain remains active, and no takedown or sinkholing actions have been observed as of this report. Users encountering this domain are advised to avoid interaction, particularly with any verification prompts or login requests. Organizations should block the domain and its resolving IP at the network level and monitor for related indicators of compromise, including the SSL certificate thumbprint and registrar details. Given the domain’s recent creation date and lack of historical reputation, it presents an elevated risk for credential theft, particularly in regions where Australia Post operates.