WEBSITE ANALYSIS REPORT

http://govvaulogonnow.info

10 Oct 2026 · 08:19:11.000 UTCpublic

Report tags: australia government phishing suspicious
Submit tags

Request review

Phishing detected

9 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:07:53.747 GET 200 document 812 B 228 ms 5 alerts

08:07:54.432 GET 200 script 83.6 KB 84 ms —

08:07:54.435 GET 200 script 129 B 29 ms 5 alerts

08:07:54.436 GET 200 script 1.6 KB 91 ms 7 alerts

08:07:54.437 GET 200 script 778 B 54 ms 5 alerts

08:07:54.559 GET 404 img 355 B 28 ms 5 alerts

08:07:57.783 OPTIONS 204 xhr 0 B 83 ms —

08:07:59.072 GET 200 document 6.5 KB 30 ms 5 alerts

08:07:59.143 GET 200 stylesheet 148.6 KB 114 ms 5 alerts

08:07:59.146 GET 200 script 83.6 KB 28 ms —

08:07:59.148 GET 200 script 129 B 31 ms 5 alerts

08:07:59.153 GET 200 script 1.6 KB 29 ms 7 alerts

08:07:59.154 GET 200 script 2.2 KB 55 ms 5 alerts

Transaction #15

Request / response

URL

GET HTTPS

https://govvaulogonnow.info/java/LOGIN.js

IP / ASN

95.214.53.197

AS201814 · MEVSPACE sp. z o.o.

Requested by: https://govvaulogonnow.info/cores/Login.html

Resource information

File type: ASCII text, with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 23 Oct 2025 · 12:29:10.722 UTC
Last seen (UTC): 10 Oct 2026 · 08:19:16.702 UTC
Times seen: 5

Size: 2.2 KB (2289 bytes)
MD5: 22b63c93779e088a5af052bf8fbac92f
SHA1: 6c049a07010a273e7f37943d9a9cddf24a13f256
SHA256: c37ca3ce21b6d737590e086cc758f31f2a9094a6ba1882156912b374589e627c

Certificate information

Issuer: Let's Encrypt · YR2
Subject: govvaulogonnow.info
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 68:1D:51:5D:CD:12:7C:36:D6:92:26:32:BC:B5:D4:7C:C3:B9:D9:26
Valid from: Tue, 06 Oct 2026 01:51:03 GMT
Valid until: Mon, 04 Jan 2027 01:51:02 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /java/LOGIN.js HTTP/1.1
Host: govvaulogonnow.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Sat, 10 Oct 2026 08:07:59 GMT
Server: Apache
Last-Modified: Tue, 09 Jun 2026 14:09:09 GMT
Accept-Ranges: bytes
Content-Length: 2289
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript

08:07:59.156 GET 200 img 62.6 KB 125 ms 6 alerts

08:07:59.157 GET 200 img 136.2 KB 431 ms 5 alerts

08:07:59.158 GET 200 img 1.8 KB 125 ms 5 alerts

08:07:59.160 GET 200 img 62.6 KB 181 ms 6 alerts

http://govvaulogonnow.info

Domain graph

Hostnames

Connections

Network requests

Transaction #15

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://govvaulogonnow.info

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #15

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://govvaulogonnow.info

Domain graph

Network requests