besthomemortgages[.]au

Analysis of besthomemortgages.au as of July 26, 2026 indicates that the domain remains active and is classified as a generic phishing threat. The domain is registered through Above.au Pty Limited, and its authoritative name servers are ns1.abovedomains.com and ns2.abovedomains.com. HTTP responses are currently issuing a 302 redirect, a behavior commonly observed in phishing infrastructure that forwards visitors to a secondary location.

The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy mitigation service, confirming that at least one defensive feed has flagged it as malicious. VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the vendors returned a detection at the time of the scan, but the lack of detections does not constitute evidence of legitimacy and should not be interpreted as a safety guarantee. No additional intelligence such as IP address, autonomous system number, geographic location, SSL certificate details, or page title has been disclosed, leaving those aspects of the hosting environment unverified.

Consequently, defenders should continue to treat besthomemortgages.au as a malicious resource. Recommended actions include maintaining the block on the domain in network and endpoint filters, monitoring for any new resolution or hosting changes, and updating detection rules to capture the observed 302 redirect pattern. Organizations employing web‑gateway or DNS‑filtering solutions should ensure that the domain remains on deny lists, and security teams should watch for future reports that might provide more granular indicators of compromise.