auspost[.]addqg[.]com

Analysis indicates that the domain auspost.addqg.com resolves to the IPv4 address 47.79.39.190. The address is currently active and has been associated with a generic phishing classification. VirusTotal reports that 12 out of 91 scanned security vendors have flagged the domain as malicious, demonstrating a moderate consensus among detection engines. The domain is listed on a single external security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one commercial mitigation product recognizes it as hostile. The risk rating assigned to the domain is elevated, and its operational status remains active as of the report date, August 07, 2026.

Publicly available intelligence does not include details such as SSL certificate metadata, HTTP response codes, page title, or any observed landing page content, so the exact luring technique employed by the site cannot be verified at this time. Likewise, no information about the registrar, ASN, or hosting provider has been disclosed, limiting the ability to map the broader infrastructure. The limited presence on only one blocklist suggests that broader community awareness may be nascent, increasing the likelihood of exposure for organizations that rely on fewer threat feeds. Defenders should prioritize immediate network-level mitigation by adding auspost.addqg.com to outbound filtering rules and ensuring that any DNS resolvers employed by the organization block resolution to 47.79.39.190.

Existing security appliances that integrate PhishDestroy signatures should already be preventing access, but verification of that enforcement is advised. Continuous monitoring of VirusTotal and other multi‑vendor aggregators for changes in detection counts is recommended, as increased vendor consensus may indicate further weaponization. Organizations using email security gateways should also consider augmenting URL reputation checks to capture this domain, given its active phishing status.