Report - email.gminfo.ca/default.aspx?chkMeSupport=VDEBkkEv7lwnp3k0GupL755k1oR3k/YGv/yaQ2vetD8=&WTD=REDIR&DESTURL=https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0

Report Overview

Visited public
2025-02-01 03:40:58
Tags
URL
email.gminfo.ca/default.aspx?chkMeSupport=VDEBkkEv7lwnp3k0GupL755k1oR3k/YGv/yaQ2vetD8=&WTD=REDIR&DESTURL=https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0
Finishing URL
slurpmail.net/
IP / ASN
69.10.232.82
#23136 ONX
Title
slurpmail.net

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
email.gminfo.ca	unknown	2011-09-23	2017-06-20	2025-01-28	637 B	543 B	69.10.232.82
akams.autoclma.autoclma.com	unknown	2024-05-03	2025-01-08	2025-01-28	585 B	531 B	194.107.126.67
slurpmail.net	unknown	2022-07-06	2022-07-06	2025-01-29	2.3 kB	143 kB	217.70.184.38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-01	medium	autoclma.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	slurpmail.net/	ScriptElement	0 B	0001-01-01	2025-05-21
Pretty URL slurpmail.net/ IP 217.70.184.38 ASN #29169 GANDI SAS Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-21 03:22 Times Seen4737127 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (8)

URL IP Response Size

email.gminfo.ca/default.aspx?chkMeSupport=VDEBkkEv7lwnp3k0GupL755k1oR3k/YGv/yaQ2vetD8=&WTD=REDIR&DESTURL=https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0

69.10.232.82

302 Found

183 B

URL
email.gminfo.ca/default.aspx?chkMeSupport=VDEBkkEv7lwnp3k0GupL755k1oR3k/YGv/yaQ2vetD8=&WTD=REDIR&DESTURL=https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0
IP
69.10.232.82:0
ASN
#23136 ONX

File type
HTML document, ASCII text, with CRLF line terminators
Size
183 B (183 bytes)
Hash
a61ef454e0a5e89e6f483c8a6095b792
7a471ce6d14b5ba8878ab07e62db889964ee18e4
cf379954610163e81893431dea224acbd277f862cc9a9484f1c0a129b62656c7

HTTP Headers

GET /default.aspx?chkMeSupport=VDEBkkEv7lwnp3k0GupL755k1oR3k/YGv/yaQ2vetD8=&WTD=REDIR&DESTURL=https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0 HTTP/1.1
Host: email.gminfo.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://aikl-yakudo.com/q/bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: https://www.gmdealerdirect.ca
Date: Sat, 01 Feb 2025 03:40:27 GMT
Content-Length: 183

akams.autoclma.autoclma.com/owa/data/?email=bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0

194.107.126.67

302 Found

0 B

URL User Request GET HTTP/2
akams.autoclma.autoclma.com/owa/data/?email=bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0
IP
194.107.126.67:443
ASN
#58212 dataforest GmbH

Certificate
IssuerLet's Encrypt
Subjectakams.autoclma.autoclma.com
Fingerprint65:AD:D2:FC:0A:BD:30:24:5F:5E:60:2E:EF:27:87:B0:AA:26:94:2C
ValidityMon, 27 Jan 2025 15:12:14 GMT - Sun, 27 Apr 2025 15:12:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /owa/data/?email=bWljaGFlbC5tYXJ0aW5lekBzbHVycG1haWwubmV0 HTTP/1.1
Host: akams.autoclma.autoclma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aikl-yakudo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
set-cookie: PHPSESSID=uld6q0hv3flie1r14fa5d97an7; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: http://slurpmail.net
content-type: text/html; charset=UTF-8
content-length: 0
date: Sat, 01 Feb 2025 03:40:29 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

slurpmail.net/

217.70.184.38

200 OK

1.1 kB

URL User Request GET HTTP/1.1
slurpmail.net/
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

File type
HTML document, Unicode text, UTF-8 text, with very long lines (711)
Size
1.1 kB (1135 bytes)
Hash
c2489a432f66576e83bd39bfe274ba4d
b7e9e7d919c18d4391a723dda6475c33dea0b8b9
e648772525516f2dcb32138a4ed9a5017fc913a60c10491a3ce5baaaa493a657

HTTP Headers

GET / HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Security-Policy: default-src 'self'; script-src 'nonce-db5b9d9b260641e89ca1d5d0e2bf85fb';
Vary: Accept-Encoding, Accept-Language
Content-Encoding: gzip

slurpmail.net/fonts/Inter/Inter-Regular--latin.woff2

217.70.184.38

200 OK

1.1 kB

URL GET HTTP/1.1
slurpmail.net/fonts/Inter/Inter-Regular--latin.woff2
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

Requested by
http://slurpmail.net/

File type
HTML document, Unicode text, UTF-8 text, with very long lines (711)
Size
1.1 kB (1135 bytes)
Hash
a51037b13b010a8b37a6fce9d2ea646a
e5568b1499d004871f7a81af6483b6f607d265f8
f84e85a5286ea0f04c42c6a2fb4858511816b0ebbd4962fa93c145c32d904cd5

HTTP Headers

GET /fonts/Inter/Inter-Regular--latin.woff2 HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://slurpmail.net/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Security-Policy: default-src 'self'; script-src 'nonce-d0402e1fc87a4745a674aebab6471340';
Vary: Accept-Encoding, Accept-Language
Content-Encoding: gzip

slurpmail.net/main-dbee9253.css

217.70.184.38

200 OK

2.0 kB

URL GET HTTP/1.1
slurpmail.net/main-dbee9253.css
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

Requested by
http://slurpmail.net/

File type
ASCII text, with very long lines (6482), with no line terminators
Size
2.0 kB (1990 bytes)
Hash
58a7e96142827f902472f6ac112ede3b
7cc03bad30fc036eba66e75c4aa6390771f8a347
4eb3f5c342b60894d3d27170875c07d50a79afa5447ae7ccb169b14799b0d17e

HTTP Headers

GET /main-dbee9253.css HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://slurpmail.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: text/css
Last-Modified: Tue, 05 Nov 2024 16:05:16 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"672a423c-1952"
Expires: Sat, 01 Feb 2025 04:40:30 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

slurpmail.net/fonts/Inter/Inter-SemiBold--latin.woff2

217.70.184.38

200 OK

1.1 kB

URL GET HTTP/1.1
slurpmail.net/fonts/Inter/Inter-SemiBold--latin.woff2
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

Requested by
http://slurpmail.net/

File type
HTML document, Unicode text, UTF-8 text, with very long lines (711)
Size
1.1 kB (1134 bytes)
Hash
80377867972b440d167a755e89e75b96
29b484b0a1c3f9603fcb49fbf7671440bdca61e2
c789bd453e76ffa26430d7f3c90cb45bc6097d1c63ba07ae852dafb68b0580c4

HTTP Headers

GET /fonts/Inter/Inter-SemiBold--latin.woff2 HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://slurpmail.net/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Content-Security-Policy: default-src 'self'; script-src 'nonce-c0b6f7d0b6cc45e6a6e283389a0b3b19';
Vary: Accept-Encoding, Accept-Language
Content-Encoding: gzip

slurpmail.net/favicon.ico

217.70.184.38

200 OK

25 kB

URL GET HTTP/1.1
slurpmail.net/favicon.ico
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

Requested by
http://slurpmail.net/

File type
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Size
25 kB (24838 bytes)
Hash
d98661ca3371e1a8fa03e00ed8bd603e
b05a91f76c8bc3df0eaf5ba45229ec4525fe492e
2ca8a7d5bf257b1522cc51f7c192f63132bead19555afd3149bfb63d5203ac5a

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://slurpmail.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: image/x-icon
Content-Length: 24838
Last-Modified: Tue, 05 Nov 2024 16:05:16 GMT
Connection: close
ETag: "672a423c-6106"
Expires: Sat, 01 Feb 2025 04:40:30 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

slurpmail.net/img/Parking.jpg

217.70.184.38

200 OK

111 kB

URL GET HTTP/1.1
slurpmail.net/img/Parking.jpg
IP
217.70.184.38:80
ASN
#29169 GANDI SAS

Requested by
http://slurpmail.net/

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3
Size
111 kB (110669 bytes)
Hash
39c4f6a8b299c72932002c05fc807a63
074c34cc29c6a863321f32ba8fd14e687c21a993
946c31be4929e8fb324836480c317c5dc4978b9d3e4e9ac00d46e4f9be5d3ece

HTTP Headers

GET /img/Parking.jpg HTTP/1.1
Host: slurpmail.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://slurpmail.net/main-dbee9253.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Feb 2025 03:40:30 GMT
Content-Type: image/jpeg
Content-Length: 110669
Last-Modified: Tue, 05 Nov 2024 16:05:16 GMT
Connection: close
ETag: "672a423c-1b04d"
Expires: Sat, 01 Feb 2025 04:40:30 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type