other · AU

Optus

Singtel Optus Pty Limited

Australian telecommunications.

Primary official domain
optus.com.au
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
0
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
5
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF ~all · 3/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
optus
Label aliases
Optus
Official domains
optus.com.au (all)
Generated spellings
84 tracked · 15 observed somewhere · 69 not observed (all)
Can receive mail
7 spellings and 0 reported domains publish MX records · mail at Above.com parking (parking placeholder) 1 · bounce.argewebhosting.nl 1 · Google 1 · 4 more (15 spellings and 0 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)

Generated spellings we track

Spellings generated from this organization's official domains and brand tokens (typos, keyboard slips, lure words, look-alike characters, other top-level domains). Each one is checked against phishing feeds, certificate logs and DNS. A spelling that exists is not a finding and not a verdict: it may be unrelated, legitimate or registered defensively.

Tracked spellings
84
generated 2026-10-19; bounded dictionary, not every possible spelling
Seen in a phishing feed
0
spellings with at least one approved-source feed host on that domain
Seen in certificate logs
0
spellings with a certificate name on that domain in the logs we collect
Resolves
15
spellings that answered a DNS query; 84 of 84 checked so far
Can receive mail
7
spellings with an MX record, of 15 checked · mail at Above.com parking (parking placeholder) 1 · bounce.argewebhosting.nl 1 · Google 1 · show
Listed mail infrastructure
0
mail-enabled spellings whose MX host address or SPF sending range is on an IP list approved for display · a fact about shared addresses, not about who operates the spelling

Other top-level domain 3 tracked · 3 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesMailState
optus[.]store
optus.com.auNot observedNot observed
Alive100.80.225.84last answered 2026-10-19
MXSPFDMARCmail at Mailgun (sending service) · sends via Mailgun · checked 2026-10-19
Observed
optus[.]online
optus.com.auNot observedNot observed
Alive145.131.10.225CLDIN-NL Your Hosting B.V. part of Your.Online (AS48635) · NLlb01.argewebhosting.nllast answered 2026-10-19
MXSPFDMARCmail at bounce.argewebhosting.nl · DMARC policy quarantine · checked 2026-10-19
Observed
optus[.]net
optus.com.auNot observedNot observed
Alive211.29.132.105MPX-AS Microplex PTY LTD (AS4804) · AUlast answered 2026-10-19
MXSPFDMARCmail at mx-20.au-east.atmailcloud.com · DMARC policy reject · sends via spf.au-east.atmailcloud.com · checked 2026-10-19
Observed

Character omitted 1 tracked · 1 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesMailState
opus[.]com[.]au
optus.com.auNot observedNot observed
Alive4.174.165.15Microsoft AzureMicrosoft Azure (AS8075) · USlast answered 2026-10-19
MXSPFDMARCmail at Microsoft 365 (consumer mailbox) · DMARC policy none (monitor only) · sends via opus.co.nz, Microsoft 365 · checked 2026-10-19
Observed

Vowel changed 3 tracked · 3 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesMailState
optos[.]com[.]au
optus.com.auNot observedNot observed
Alive66.203.76.177AS17378 - TierPoint, LLC (AS17378) · USstatic-177-76-203-66.axsne.netlast answered 2026-10-19
MXSPFDMARCmail at relay1.netnames.net · checked 2026-10-19
Observed
optis[.]com[.]au
optus.com.auNot observedNot observed
Alive103.224.182.247 · Confirmed phishing host address (DomainSpoof, 14 days)Trellian (Above.com parking)Trellian (Above.com parking) (AS133618) · AUlb-182-247.above.comlast answered 2026-10-19
MXSPFDMARCmail at Above.com parking (parking placeholder) · checked 2026-10-19
Observed
aptus[.]com[.]au
optus.com.auNot observedNot observed
Alive3.33.130.190Amazon Web ServicesAmazon Web Services (AS16509) · USa2aa9ff50de748dbe.awsglobalaccelerator.com15.197.148.33Amazon Web ServicesAmazon Web Services (AS16509) · USa2aa9ff50de748dbe.awsglobalaccelerator.comlast answered 2026-10-19
MXSPFDMARCmail at Google (consumer mailbox) · checked 2026-10-19
Observed

Last feed and certificate-log check 2026-10-19 05:45 UTC. “Not observed” means none of our checks has seen the spelling; it is not proof the name is unregistered. An observed spelling is not a finding: reported abuse appears only under Reported matches, from independent source evidence. Feed presence counts hosts from approved sources only; certificate presence comes from the public logs described on the Certificates tab; DNS checks cover the apex name and are refreshed on a schedule. Under each address: network (AS) and country come from the public iptoasn.com routing dataset; a reverse-DNS name is what the address's owner published. Neither shows who controls the hostname: shared hosting, CDNs and cloud providers put unrelated names behind one address. Mail (MX, SPF, DMARC) is checked only for spellings observed somewhere; mail records show the domain can send or receive mail; they do not show who operates it. The provider named under the chips is read from the first MX host (a curated list of mailbox, hosting, parking, forwarding and registrar services; otherwise the host itself); “sends via” lists the services the SPF record authorises; the DMARC policy is the published p= tag. A red MX or SPF chip names the IP list an address behind the record is on (the MX host's address, or an SPF ip4 range of the record or of the services it includes), checked at page view against the lists approved for display. Mail providers and sending services are shared, so a listing says nothing about who operates the domain. The last bulk DNS check of every tracked spelling finished 2026-10-19 11:34 UTC (784,714 names).