| gov-security-info-update.com//gov_bank/css/mgv2-application.css |  91.215.85.79 | 200 OK | 20 kB |
URL GET HTTP/3gov-security-info-update.com//gov_bank/css/mgv2-application.css IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with very long lines (59825) Hashdc1b3b3e5043dd0f04efd60c46ac3953 a3d401b405720346eed630f13bd2c792af27a05b 4da7bbf336eb443d346f3fe3604ccbcde366b43df36f87434334d54fa1aa0ed7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //gov_bank/css/mgv2-application.css HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 20:54:37 GMT
content-type: text/css
last-modified: Sun, 16 Apr 2023 21:25:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20074
date: Fri, 19 Apr 2024 20:54:37 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| gov-security-info-update.com//js/option.js | 91.215.85.79 | 200 OK | 151 B |
URL GET HTTP/3gov-security-info-update.com//js/option.js IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
Hash10aa3b9d2221406ebe36ac30387a2402 fb445447f9f831369531208f1deb6b9de70ff6b7 0615069aba033505df5dcfde042bed3ae87651cda2bfe26a8bdca4a74c4d0036
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //js/option.js HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 27 Jun 2023 03:05:07 GMT
accept-ranges: bytes
content-length: 151
date: Fri, 19 Apr 2024 20:54:37 GMT
|
|
| gov-security-info-update.com//js/browser.js | 91.215.85.79 | 200 OK | 177 B |
URL GET HTTP/3gov-security-info-update.com//js/browser.js IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeJavaScript source, ASCII text Hash97471fb66b4f36a83b206d54541f38c3 2f50df946181afde98d406e7364d6eeb12a39694 c900fdae2da61444bad633091da41c3b6b71b35b2363061e8623a34ac5a5d832
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //js/browser.js HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Sun, 02 Jul 2023 12:42:30 GMT
accept-ranges: bytes
content-length: 177
date: Fri, 19 Apr 2024 20:54:37 GMT
|
|
| gov-security-info-update.com//gov_bank/css/blugov.css | 91.215.85.79 | 200 OK | 10 kB |
URL GET HTTP/3gov-security-info-update.com//gov_bank/css/blugov.css IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
Hashbc2f77e3f9197b79fa5124e7532f8aa1 95e931e353dded9f56be47d3bba0f88275ed109f 9c3ea6e74fc925e182bac33c333f7a3f2691bd1af7cb614cc70d3827ec205f82
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //gov_bank/css/blugov.css HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 20:54:37 GMT
content-type: text/css
last-modified: Mon, 17 Apr 2023 08:33:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10231
date: Fri, 19 Apr 2024 20:54:37 GMT
|
|
| gov-security-info-update.com//gov_bank/img/myGov-cobranded-logo-black.svg | 91.215.85.79 | 200 OK | 20 kB |
URL GET HTTP/3gov-security-info-update.com//gov_bank/img/myGov-cobranded-logo-black.svg IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeSVG Scalable Vector Graphics image Hashb53f20300babca4ebb422e59b888be1f 699c5898c6dd9d2b8b949db2e13c8f0b0d29e26b 954aa858b3bffb8511bc41bc88b07d2b24597c37faf522550e26c9aa3b0d220d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //gov_bank/img/myGov-cobranded-logo-black.svg HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 20:54:37 GMT
content-type: image/svg+xml
last-modified: Sun, 16 Apr 2023 21:27:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20323
date: Fri, 19 Apr 2024 20:54:37 GMT
|
|
| gov-security-info-update.com//gov_bank/img/myGov-cobranded-logo-white.svg | 91.215.85.79 | 200 OK | 20 kB |
URL GET HTTP/3gov-security-info-update.com//gov_bank/img/myGov-cobranded-logo-white.svg IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeSVG Scalable Vector Graphics image Hashde646b2f77f5fa27d55a01bbb9cf584e 33316eb871adf6e08af7c780eb15872549d08dc3 10b11a7c97b90bcf7ad520ac94c5769d08540ce1ee3b84d487c587bf128e3388
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //gov_bank/img/myGov-cobranded-logo-white.svg HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 20:54:37 GMT
content-type: image/svg+xml
last-modified: Sun, 16 Apr 2023 21:28:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20325
date: Fri, 19 Apr 2024 20:54:37 GMT
|
|
| code.jquery.com/jquery-3.7.0.js |  151.101.130.137 | 200 OK | 84 kB |
URL GET HTTP/2code.jquery.com/jquery-3.7.0.js IP151.101.130.137:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashbce53304d5d3438acfa5fcfae816769f d70fbf2f6aed2c76801d35fd793bf70a9cc060eb 265a924c42de4784cba8fd0e1bd77133bc833ea5f5a31fc77e08922c18fcfa43
GET /jquery-3.7.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-45944"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 20:54:37 GMT
age: 18757881
x-served-by: cache-lga13628-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 2, 15502
x-timer: S1713560078.845471,VS0,VE0
vary: Accept-Encoding
content-length: 83531
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 275220
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 327607
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:20:56 GMT
expires: Fri, 18 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 113622
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gov-security-info-update.com/robots.txt | 91.215.85.79 | 200 OK | 10 kB |
URL User Request GET HTTP/2gov-security-info-update.com/robots.txt IP91.215.85.79:443
CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash92cd2d399991c2738c34120aefa9c629 388bb5be448bda3658764d99fb22bbfd8060d9ad a050ad340d6305749e78c788e38f34e89a85877b31d25ee8dedc590780f98d3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /robots.txt HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:37 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:39 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:40 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:41 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:42 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:43 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:44 GMT
|
|
| gov-security-info-update.com//gov_bank/icons/blugov-left-chevron-dark.svg | 91.215.85.79 | 200 OK | 2.5 kB |
URL GET HTTP/3gov-security-info-update.com//gov_bank/icons/blugov-left-chevron-dark.svg IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash92cd2d399991c2738c34120aefa9c629 388bb5be448bda3658764d99fb22bbfd8060d9ad a050ad340d6305749e78c788e38f34e89a85877b31d25ee8dedc590780f98d3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET //gov_bank/icons/blugov-left-chevron-dark.svg HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com//gov_bank/css/blugov.css
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:38 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:46 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:47 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:48 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:49 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:50 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:51 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:52 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:53 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:54 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:55 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:56 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:57 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:58 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:59 GMT
|
|
| gov-security-info-update.com//Page/current_time | 91.215.85.79 | 200 OK | 11 B |
URL POST HTTP/3gov-security-info-update.com//Page/current_time IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeASCII text, with CRLF line terminators Hashf9aaa3ea3513c13f9b02dac9c6a580b8 44cac6e38a6fc196e5ea967873d9250a258e80b7 75dbba8fd110adbe0bda707bcbfe667247f5a2d590c5380781abcde1ac20062d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australian Government | | OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST //Page/current_time HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://gov-security-info-update.com
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:55:00 GMT
|
|
| fonts.googleapis.com/css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap IP142.250.74.106:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash5f5bd58e02f8486ce59ed5d5fb1509d9 77fd797117ddce4c084ad2a14caa45bb1a935069 634cde3f8690c3853219fbbde17b42f14f2ce058319521ba704e0607b1620c2f
GET /css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 20:54:37 GMT
date: Fri, 19 Apr 2024 20:54:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gov-security-info-update.com/mygov/content/mgv2/icons/favicon-16x16.png | 91.215.85.79 | 200 OK | 9.9 kB |
URL GET HTTP/3gov-security-info-update.com/mygov/content/mgv2/icons/favicon-16x16.png IP91.215.85.79:443
Requested byhttps://gov-security-info-update.com/robots.txt CertificateIssuerLet's Encrypt Subjectgov-security-info-update.com Fingerprint10:DA:51:15:0C:69:9D:B6:98:B3:4B:3F:89:09:91:97:44:E1:D9:AC ValiditySat, 16 Mar 2024 02:53:33 GMT - Fri, 14 Jun 2024 02:53:32 GMT
File typeHTML document, ASCII text, with very long lines (10563), with no line terminators Hash3eaf02eaa68e68a832c093fe2f864014 2ec046493b32c58e3491a474666add79f6c6f6eb 7eae93de1d08b9189d9a59b746dc70c5eac64bc3ae75f93f46e192bddf40b1f0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Australian Government | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /mygov/content/mgv2/icons/favicon-16x16.png HTTP/1.1
Host: gov-security-info-update.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gov-security-info-update.com/robots.txt
Cookie: PHPSESSID=6c0546d937e31d9dced03ed9d1a25b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 20:54:38 GMT
|
|