auwww[.]com[.]auwww[.]mx2[.]sspl[.]com[.]au

The domain auwww.com.auwww.mx2.sspl.com.au was observed on July 24, 2026 and classified as a high‑risk brand‑impersonation site targeting Google. The site returned an HTTP 200 response with the page title "Index of /" before being taken offline. DNS resolution points to the IPv4 address 185.184.154.169, which belongs to AS38719 Dreamscape Networks Limited and is geolocated in Australia. The authoritative nameservers are ns1.vodien.com, ns2.vodien.com, and ns3.vodien.com, indicating hosting under the Vodien provider.

The domain was registered through Web Address Registration Pty Ltd and presents a valid Let's Encrypt R12 TLS certificate, which does not mitigate the malicious intent. Reputation services flag the domain extremely low: Scamadviser assigns a trust score of 1 / 100, Gridinsoft reports 0 / 100, and the site appears on one known security blocklist. Detection engines on VirusTotal reported 15 of 95 scanners flagging the domain, and Google Safe Browsing lists it for social engineering. PhishDestroy has already blocked the domain.

While the page title suggests a directory listing, no further page content has been publicly disclosed, leaving the precise phishing payload unknown. Defensive recommendations include adding the domain and its resolving IP to network blocklists, monitoring for any re‑registration attempts, and ensuring endpoint protection solutions update signatures to reflect the 15 positive VirusTotal detections. Continuous observation of the hosting provider’s IP range is advised, as similar infrastructure may be reused for related campaigns.