I got a phising message last night. At least, I think it was a phishing message.
It was pretty convincing. It said that my address is wrong and needed to be fixed for a delivery. Clicking through — I’m actually expecting a delivery, which is why I clicked through — brought up a site that looked like a form from AusPost asking for my home address. It was styled like an AusPost site, but the domain ended in “.top” instead of “auspost.com.au”, and revealing the menu, which worked, I saw links pointing to the real AusPost site.
I’m taking all this, plus the fact that it was sent at 2 AM, as signal that it’s not genuine.