Report - secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t

Report Overview

Visited public
2023-12-08 01:26:49
Tags
URL
secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t
Finishing URL
crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t
IP / ASN
185.89.211.12
#29990 ASN-APPNEX
Title
404 Not Found

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
secure.adnxs.com	396	2008-05-27	2012-05-22 18:37:37	2023-12-07 18:12:40	1.4 kB	2.2 kB	185.89.211.84
crookedcreekcreative.com	unknown	2020-04-25	2015-11-15 13:44:39	2023-11-20 13:08:49	1.9 kB	30 kB	69.49.245.172

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t	185.89.211.84	307 Temporary Redirect	0 B
URL User Request GET HTTP/2 secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t IP 185.89.211.84:443 ASN #29990 ASN-APPNEX Certificate IssuerDigiCert Inc Subject.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 307 Temporary Redirect server: nginx/1.21.3 date: Fri, 08 Dec 2023 01:26:32 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fumzzng%2F%2F%2F%2F%2F%2F%2FZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t an-x-request-uuid: b57e59c7-63db-4aa9-bdef-e34163b329d9 set-cookie: uuid2=1959815927251766416; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:26:32 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fumzzng%2F%2F%2F%2F%2F%2F%2FZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t	185.89.211.84	302 Found	0 B
URL User Request GET HTTP/2 secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fumzzng%2F%2F%2F%2F%2F%2F%2FZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t IP 185.89.211.84:443 ASN #29990 ASN-APPNEX Certificate IssuerDigiCert Inc Subject.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2Fumzzng%2F%2F%2F%2F%2F%2F%2FZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: uuid2=1959815927251766416 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx/1.21.3 date: Fri, 08 Dec 2023 01:26:32 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t an-x-request-uuid: 3b90a871-c231-4fba-a198-934d60e42b31 set-cookie: uuid2=1959815927251766416; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:26:32 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t	69.49.245.172	404 Not Found	10 kB
URL User Request GET HTTP/1.1 crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10244 bytes) Hash a03f460f9c6fe3b3acf372abfd91a13d a2992c855fb64b3040f844226d1852f28492ab26 36c21ec188e3e9809aece5ce0c6acbc501a4e21583721fa144deaf96e119aede HTTP Headers `GET ////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:26:31 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

	crookedcreekcreative.com/img-sys/server_misconfigured.png	69.49.245.172	200 OK	3.2 kB
URL GET HTTP/1.1 crookedcreekcreative.com/img-sys/server_misconfigured.png IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data Size 3.2 kB (3164 bytes) Hash f79adaf00f83dc9757086cdbe8645ff0 82f37b8be7668eab8e1a06de828cb336799c8134 944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f HTTP Headers `GET /img-sys/server_misconfigured.png HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:26:31 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 3164 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png`

	crookedcreekcreative.com/img-sys/powered_by_cpanel.svg	69.49.245.172	200 OK	5.6 kB
URL GET HTTP/1.1 crookedcreekcreative.com/img-sys/powered_by_cpanel.svg IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5616) Size 5.6 kB (5617 bytes) Hash c47b4b5200566a2a496a11ba472ec5da 3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c 179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9 HTTP Headers `GET /img-sys/powered_by_cpanel.svg HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:26:31 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 5617 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/svg+xml`

	crookedcreekcreative.com/favicon.ico	69.49.245.172	404 Not Found	10 kB
URL GET HTTP/1.1 crookedcreekcreative.com/favicon.ico IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10116 bytes) Hash d539285e2a77f372645cfe0d545adbe7 f772640c6f5e0678dc3f79821bc0a497a3b560c7 95ecc4cf01d630609240f412f1d6099be793a50704b6b6da2389f7181ac52ccd HTTP Headers `GET /favicon.ico HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////umzzng///////ZGNveW5lQGNhbmFjY29yZGdlbnVpdHkuY29t Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:26:31 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`