Report - secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20=

Report Overview

Visited public
2023-12-08 01:40:03
Tags
URL
secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20=
Finishing URL
crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20=
IP / ASN
37.252.172.123
#29990 ASN-APPNEX
Title
404 Not Found

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
secure.adnxs.com	396	2008-05-27	2012-05-22 18:37:37	2023-12-07 18:12:40	1.3 kB	2.2 kB	37.252.173.215
crookedcreekcreative.com	unknown	2020-04-25	2015-11-15 13:44:39	2023-11-21 10:03:14	1.8 kB	30 kB	69.49.245.172

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20=	37.252.173.215		0 B
URL secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= IP 37.252.173.215:0 ASN #29990 ASN-APPNEX File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 307 Temporary Redirect server: nginx/1.23.4 date: Fri, 08 Dec 2023 01:39:46 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: * accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fhf3zih%2F%2F%2F%2F%2F%2F%2Fa2x5bmNoQGNnZi5jb20%3D an-x-request-uuid: 31bf2b1d-c10f-4937-b7c3-bf8f8b7458dd set-cookie: uuid2=8061714884885489631; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:39:46 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fhf3zih%2F%2F%2F%2F%2F%2F%2Fa2x5bmNoQGNnZi5jb20%3D	37.252.173.215		0 B
URL secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fhf3zih%2F%2F%2F%2F%2F%2F%2Fa2x5bmNoQGNnZi5jb20%3D IP 37.252.173.215:0 ASN #29990 ASN-APPNEX File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fhf3zih%2F%2F%2F%2F%2F%2F%2Fa2x5bmNoQGNnZi5jb20%3D HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: uuid2=8061714884885489631 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx/1.23.4 date: Fri, 08 Dec 2023 01:39:46 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: * accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= an-x-request-uuid: c12510f4-78dd-45f8-bf14-1088117232b3 set-cookie: uuid2=8061714884885489631; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:39:46 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20=	69.49.245.172		10 kB
URL User Request GET crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= IP 69.49.245.172:0 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10212 bytes) Hash 97d00c725654738c3a34fbefd6db8076 6995ba0d22d3978f70d8d272616f0cff9c6d8298 dba6903dadbe565f76941be87e91e7455c649df01e4bbfad02547997672dcd9a HTTP Headers `GET ////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:39:45 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

	crookedcreekcreative.com/img-sys/server_misconfigured.png	69.49.245.172		3.2 kB
URL crookedcreekcreative.com/img-sys/server_misconfigured.png IP 69.49.245.172:0 ASN #46606 UNIFIEDLAYER-AS-1 File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data Size 3.2 kB (3164 bytes) Hash f79adaf00f83dc9757086cdbe8645ff0 82f37b8be7668eab8e1a06de828cb336799c8134 944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f HTTP Headers `GET /img-sys/server_misconfigured.png HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:39:45 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 3164 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png`

	crookedcreekcreative.com/img-sys/powered_by_cpanel.svg	69.49.245.172		5.6 kB
URL crookedcreekcreative.com/img-sys/powered_by_cpanel.svg IP 69.49.245.172:0 ASN #46606 UNIFIEDLAYER-AS-1 File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5616) Size 5.6 kB (5617 bytes) Hash c47b4b5200566a2a496a11ba472ec5da 3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c 179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9 HTTP Headers `GET /img-sys/powered_by_cpanel.svg HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:39:45 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 5617 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/svg+xml`

	crookedcreekcreative.com/favicon.ico	69.49.245.172		10 kB
URL crookedcreekcreative.com/favicon.ico IP 69.49.245.172:0 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10116 bytes) Hash 37337562e6b55e013e763203b672e39f d6ba8086ea696c36fdd51b2f792f62f87f2e8dee 1f1273e235d99256dc6d3ad05a7da2a1d9d4a6c21738ef812da961f2e730b4de HTTP Headers `GET /favicon.ico HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////hf3zih///////a2x5bmNoQGNnZi5jb20= Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:39:45 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`