| augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword |  91.215.85.79 | 200 OK | 23 kB |
URL User Request GET HTTP/2augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword IP91.215.85.79:443
CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash23b3e928fecfa8f778b84464337282e4 88a0f6a4a3a5f8df42d9d3c63b6d3c3218e79d74 bde93db330fb422d74b2753a751c519b2f6d5ef2d962eb569d69423bf1a21ef1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government |
GET /las/mygov-login?execution=e2s1&_eventId=resetpassword HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:50 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| augovsecurelogin.com/gov_bank/css/blugov.css | 91.215.85.79 | 200 OK | 10 kB |
URL GET HTTP/3augovsecurelogin.com/gov_bank/css/blugov.css IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
Hashbc2f77e3f9197b79fa5124e7532f8aa1 95e931e353dded9f56be47d3bba0f88275ed109f 9c3ea6e74fc925e182bac33c333f7a3f2691bd1af7cb614cc70d3827ec205f82
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /gov_bank/css/blugov.css HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 16:36:51 GMT
content-type: text/css
last-modified: Mon, 17 Apr 2023 08:33:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10231
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/js/option.js | 91.215.85.79 | 200 OK | 151 B |
URL GET HTTP/3augovsecurelogin.com/js/option.js IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
Hash10aa3b9d2221406ebe36ac30387a2402 fb445447f9f831369531208f1deb6b9de70ff6b7 0615069aba033505df5dcfde042bed3ae87651cda2bfe26a8bdca4a74c4d0036
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /js/option.js HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 27 Jun 2023 03:05:08 GMT
accept-ranges: bytes
content-length: 151
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/js/browser.js | 91.215.85.79 | 200 OK | 177 B |
URL GET HTTP/3augovsecurelogin.com/js/browser.js IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeJavaScript source, ASCII text Hash97471fb66b4f36a83b206d54541f38c3 2f50df946181afde98d406e7364d6eeb12a39694 c900fdae2da61444bad633091da41c3b6b71b35b2363061e8623a34ac5a5d832
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /js/browser.js HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Sun, 02 Jul 2023 12:42:30 GMT
accept-ranges: bytes
content-length: 177
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/gov_bank/img/myGov-cobranded-logo-white.svg | 91.215.85.79 | 200 OK | 20 kB |
URL GET HTTP/3augovsecurelogin.com/gov_bank/img/myGov-cobranded-logo-white.svg IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeSVG Scalable Vector Graphics image Hashde646b2f77f5fa27d55a01bbb9cf584e 33316eb871adf6e08af7c780eb15872549d08dc3 10b11a7c97b90bcf7ad520ac94c5769d08540ce1ee3b84d487c587bf128e3388
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /gov_bank/img/myGov-cobranded-logo-white.svg HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 16:36:51 GMT
content-type: image/svg+xml
last-modified: Sun, 16 Apr 2023 21:28:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20325
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/gov_bank/img/myGov-cobranded-logo-black.svg | 91.215.85.79 | 200 OK | 20 kB |
URL GET HTTP/3augovsecurelogin.com/gov_bank/img/myGov-cobranded-logo-black.svg IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeSVG Scalable Vector Graphics image Hashb53f20300babca4ebb422e59b888be1f 699c5898c6dd9d2b8b949db2e13c8f0b0d29e26b 954aa858b3bffb8511bc41bc88b07d2b24597c37faf522550e26c9aa3b0d220d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /gov_bank/img/myGov-cobranded-logo-black.svg HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 16:36:51 GMT
content-type: image/svg+xml
last-modified: Sun, 16 Apr 2023 21:27:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20323
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| code.jquery.com/jquery-3.7.0.js |  151.101.130.137 | 200 OK | 285 kB |
URL GET HTTP/2code.jquery.com/jquery-3.7.0.js IP151.101.130.137:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Size285 kB (284996 bytes) Hashbce53304d5d3438acfa5fcfae816769f d70fbf2f6aed2c76801d35fd793bf70a9cc060eb 265a924c42de4784cba8fd0e1bd77133bc833ea5f5a31fc77e08922c18fcfa43
GET /jquery-3.7.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: "28feccc0-45944"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 25 Apr 2024 16:36:51 GMT
age: 1685550
x-served-by: cache-lga13628-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 255, 1
x-timer: S1714063011.121327,VS0,VE1
vary: Accept-Encoding
content-length: 284996
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 173353
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 225740
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 13:20:56 GMT
expires: Fri, 25 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 11755
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:52 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:53 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:54 GMT
|
|
| augovsecurelogin.com/mygov/content/mgv2/icons/favicon-16x16.png | 91.215.85.79 | 200 OK | 2.5 kB |
URL GET HTTP/3augovsecurelogin.com/mygov/content/mgv2/icons/favicon-16x16.png IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash23b3e928fecfa8f778b84464337282e4 88a0f6a4a3a5f8df42d9d3c63b6d3c3218e79d74 bde93db330fb422d74b2753a751c519b2f6d5ef2d962eb569d69423bf1a21ef1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government |
GET /mygov/content/mgv2/icons/favicon-16x16.png HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:56 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:57 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:58 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:59 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:00 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:01 GMT
|
|
| augovsecurelogin.com/gov_bank/icons/blugov-left-chevron-dark.svg | 91.215.85.79 | 200 OK | 9.7 kB |
URL GET HTTP/3augovsecurelogin.com/gov_bank/icons/blugov-left-chevron-dark.svg IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash23b3e928fecfa8f778b84464337282e4 88a0f6a4a3a5f8df42d9d3c63b6d3c3218e79d74 bde93db330fb422d74b2753a751c519b2f6d5ef2d962eb569d69423bf1a21ef1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government |
GET /gov_bank/icons/blugov-left-chevron-dark.svg HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/gov_bank/css/blugov.css
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:36:51 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:02 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:03 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:04 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:05 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:06 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:07 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:08 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:09 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:10 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:11 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:12 GMT
|
|
| augovsecurelogin.com/Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3augovsecurelogin.com/Page/current_time IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
POST /Page/current_time HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://augovsecurelogin.com
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 16:37:13 GMT
|
|
| fonts.googleapis.com/css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap IP142.250.74.106:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash5f5bd58e02f8486ce59ed5d5fb1509d9 77fd797117ddce4c084ad2a14caa45bb1a935069 634cde3f8690c3853219fbbde17b42f14f2ce058319521ba704e0607b1620c2f
GET /css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 16:36:51 GMT
date: Thu, 25 Apr 2024 16:36:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| augovsecurelogin.com/gov_bank/css/mgv2-application.css | 91.215.85.79 | 200 OK | 128 kB |
URL GET HTTP/3augovsecurelogin.com/gov_bank/css/mgv2-application.css IP91.215.85.79:443
Requested byhttps://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword CertificateIssuerLet's Encrypt Subject*.augovsecurelogin.com Fingerprint07:00:B5:01:3F:96:1D:24:F4:CF:10:44:AC:57:B6:C3:B4:9D:51:04 ValidityThu, 25 Apr 2024 03:29:45 GMT - Wed, 24 Jul 2024 03:29:44 GMT
File typeASCII text, with very long lines (59825) Size128 kB (127809 bytes) Hashdc1b3b3e5043dd0f04efd60c46ac3953 a3d401b405720346eed630f13bd2c792af27a05b 4da7bbf336eb443d346f3fe3604ccbcde366b43df36f87434334d54fa1aa0ed7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government |
GET /gov_bank/css/mgv2-application.css HTTP/1.1
Host: augovsecurelogin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://augovsecurelogin.com/las/mygov-login?execution=e2s1&_eventId=resetpassword
Cookie: PHPSESSID=c49241a7491d4d2e3f57c0d1c66bf2e5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 16:36:50 GMT
content-type: text/css
last-modified: Sun, 16 Apr 2023 21:25:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20074
date: Thu, 25 Apr 2024 16:36:50 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|