baccarat[.]com[.]au

Analysis of the domain baccarat.com.au indicates active impersonation of the legitimate Baccarat kitchenware and homewares brand, as evidenced by the page title 'Baccarat - Australia's Largest Range of Kitchen & Homewares - Baccarat'. The domain resolves to IP address 66.33.60.129 and is currently flagged by 3 of 95 security vendors on VirusTotal, with listings on two security blocklists (PhishDestroy and BLP-Malware). AlienVault OTX records the domain in 21 threat intelligence pulses, suggesting repeated malicious activity. The SSL certificate is issued by Google Trust Services, which may lend superficial legitimacy but does not mitigate the domain's association with phishing infrastructure. Infrastructure details reveal registration through Domain Directors Pty Ltd trading as Instra, though no anomalous registration patterns are confirmed. The domain's Gridinsoft trust score of 45/100 further supports its classification as high-risk. While the exact content and mechanics of the phishing scheme remain unanalyzed, the combination of brand impersonation, blocklist presence, and threat intelligence pulses justifies immediate defensive action. Defenders should treat this domain as actively malicious and implement blocking at the DNS or proxy level, particularly for networks serving retail, e-commerce, or Australian users. No evidence currently links this domain to credential harvesting, payment fraud, or other specific attack vectors beyond generic phishing.