auwww[.]sspl[.]com[.]aumail7[.]sspl[.]com[.]auwww[.]mail7[.]sspl[.]com[.]aucom[.]auwww[.]mail7[.]sspl[.]com[.]auwww[.]sspl[.]com[.]aumail7[.]sspl[.]com[.]auwww[.]mail7[.]sspl[.]com[.]au

The domain auwww.sspl.com.aumail7.sspl.com.auwww.mail7.sspl.com.aucom.auwww.mail7.sspl.com.auwww.sspl.com.aumail7.sspl.com.auwww.mail7.sspl.com.au was observed hosting a Google brand impersonation site. An HTTP request returned status code 200 and the page title was “Index of /”, indicating an open directory listing rather than a custom login interface. DNS resolution points to the IPv4 address 185.184.154.169, which is announced by AS38719 Dreamscape Networks Limited in Australia. The authoritative name servers are ns1.vodien.com, ns2.vodien.com and ns3.vodien.com, and the registrar listed is Web Address Registration Pty Ltd. The site presents a Let’s Encrypt R12 TLS certificate, providing encryption but no assurance of the content’s legitimacy.

Reputation metrics are uniformly low: Gridinsoft assigns a trust score of 0/100, Scamadviser a score of 1/100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. Google Safe Browsing flags the URL for social engineering, and VirusTotal records fourteen of ninety‑five scanners marking the host as malicious, reinforcing the malicious classification. The overall risk level is high and the campaign status is marked offline, suggesting the site has been taken down or is no longer serving content.

Uncertainties remain regarding the exact phishing kit or page content, as no screenshots or login forms have been captured and the directory listing has not been archived. Defenders should continue to monitor the associated IP address and the vodien.com name‑server range for potential reuse, enforce blocking of the full domain in perimeter defenses, and update URL filtering lists with the observed indicators. Given the poor trust scores, multiple detections, and confirmed social‑engineering flag, traffic to this domain should be treated as malicious until further forensic evidence becomes available.