WEBSITE ANALYSIS REPORT

http://govvaulogonnow.info

10 Oct 2026 · 08:19:11.000 UTCpublic

Report tags: australia government phishing suspicious
Submit tags

Request review

Phishing detected

9 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:07:53.747 GET 200 document 812 B 228 ms 5 alerts

08:07:54.432 GET 200 script 83.6 KB 84 ms —

08:07:54.435 GET 200 script 129 B 29 ms 5 alerts

08:07:54.436 GET 200 script 1.6 KB 91 ms 7 alerts

08:07:54.437 GET 200 script 778 B 54 ms 5 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://govvaulogonnow.info/java/start.js

IP / ASN

95.214.53.197

AS201814 · MEVSPACE sp. z o.o.

Requested by: https://govvaulogonnow.info/

Resource information

File type: ASCII text, with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 22 Oct 2025 · 13:36:22.364 UTC
Last seen (UTC): 10 Oct 2026 · 08:19:16.667 UTC
Times seen: 10

Size: 778 B (778 bytes)
MD5: c746cf6a434f1f5adbfa2fb71bf53a49
SHA1: 64f538f0e8e64d4b1d0b095c7e3d62b20fc3c57c
SHA256: fa8cb4df751f91bd3982a938c58fb363347cfadf00cf9ddd66bae1bfdf7130d6

Certificate information

Issuer: Let's Encrypt · YR2
Subject: govvaulogonnow.info
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 68:1D:51:5D:CD:12:7C:36:D6:92:26:32:BC:B5:D4:7C:C3:B9:D9:26
Valid from: Tue, 06 Oct 2026 01:51:03 GMT
Valid until: Mon, 04 Jan 2027 01:51:02 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /java/start.js HTTP/1.1
Host: govvaulogonnow.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://govvaulogonnow.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Sat, 10 Oct 2026 08:07:54 GMT
Server: Apache
Last-Modified: Tue, 09 Jun 2026 14:09:09 GMT
Accept-Ranges: bytes
Content-Length: 778
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript

08:07:54.559 GET 404 img 355 B 28 ms 5 alerts

08:07:57.783 OPTIONS 204 xhr 0 B 83 ms —

08:07:59.072 GET 200 document 6.5 KB 30 ms 5 alerts

08:07:59.143 GET 200 stylesheet 148.6 KB 114 ms 5 alerts

08:07:59.146 GET 200 script 83.6 KB 28 ms —

08:07:59.148 GET 200 script 129 B 31 ms 5 alerts

08:07:59.153 GET 200 script 1.6 KB 29 ms 7 alerts

08:07:59.154 GET 200 script 2.2 KB 55 ms 5 alerts

08:07:59.156 GET 200 img 62.6 KB 125 ms 6 alerts

08:07:59.157 GET 200 img 136.2 KB 431 ms 5 alerts

08:07:59.158 GET 200 img 1.8 KB 125 ms 5 alerts

08:07:59.160 GET 200 img 62.6 KB 181 ms 6 alerts

http://govvaulogonnow.info

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://govvaulogonnow.info

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://govvaulogonnow.info

Domain graph

Network requests