Report - secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ==

Report Overview

Visited public
2023-12-08 01:30:53
Tags
URL
secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ==
Finishing URL
crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ==
IP / ASN
185.89.210.82
#29990 ASN-APPNEX
Title
404 Not Found

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
secure.adnxs.com	396	2008-05-27	2012-05-22 18:37:37	2023-12-07 18:12:40	1.4 kB	2.2 kB	185.89.210.82
crookedcreekcreative.com	unknown	2020-04-25	2015-11-15 13:44:39	2023-11-21 10:03:14	1.9 kB	30 kB	69.49.245.172

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ==	185.89.210.82	307 Temporary Redirect	0 B
URL User Request GET HTTP/2 secure.adnxs.com/clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== IP 185.89.210.82:443 ASN #29990 ASN-APPNEX Certificate IssuerDigiCert Inc Subject.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /clktrb?id=704169&redir=https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 307 Temporary Redirect server: nginx/1.21.3 date: Fri, 08 Dec 2023 01:30:35 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2F5czy0v%2F%2F%2F%2F%2F%2F%2Famx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ%3D%3D an-x-request-uuid: 01bdbf41-4283-4af3-a4b9-fad86cf8e3f0 set-cookie: uuid2=6726614429295985261; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:30:35 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2F5czy0v%2F%2F%2F%2F%2F%2F%2Famx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ%3D%3D	185.89.210.82	302 Found	0 B
URL User Request GET HTTP/2 secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2F5czy0v%2F%2F%2F%2F%2F%2F%2Famx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ%3D%3D IP 185.89.210.82:443 ASN #29990 ASN-APPNEX Certificate IssuerDigiCert Inc Subject.adnxs.com Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08 ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /bounce?%2Fclktrb%3Fid%3D704169%26redir%3Dhttps%3A%2F%2Fcrookedcreekcreative.com%2F%2F%2F%2Flimp%2F%2F%2F%2F%2F%2F%2Fauth%2F%2F%2F%2F%2F%2F%2F%2F5czy0v%2F%2F%2F%2F%2F%2F%2Famx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ%3D%3D HTTP/1.1 Host: secure.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: uuid2=6726614429295985261 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx/1.21.3 date: Fri, 08 Dec 2023 01:30:35 GMT content-type: text/html; charset=utf-8 content-length: 0 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness location: https://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== an-x-request-uuid: e5a8555d-481f-4754-8b69-350a68500533 set-cookie: uuid2=6726614429295985261; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 07-Mar-2024 01:30:35 GMT; Domain=.adnxs.com; Secure; HttpOnly x-proxy-origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com X-Firefox-Spdy: h2

	crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ==	69.49.245.172	404 Not Found	10 kB
URL User Request GET HTTP/1.1 crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10252 bytes) Hash d9a41001f17e4377c31e96b75e5fe7fa 8c998ada605b7c6c4f654bd387ce6872740d102f c73219fab15811bf62b1c8e16a128d4b332e8193a62373475dd032a9ff13467e HTTP Headers `GET ////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:30:34 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

	crookedcreekcreative.com/img-sys/server_misconfigured.png	69.49.245.172	200 OK	3.2 kB
URL GET HTTP/1.1 crookedcreekcreative.com/img-sys/server_misconfigured.png IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data Size 3.2 kB (3164 bytes) Hash f79adaf00f83dc9757086cdbe8645ff0 82f37b8be7668eab8e1a06de828cb336799c8134 944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f HTTP Headers `GET /img-sys/server_misconfigured.png HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:30:34 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 3164 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png`

	crookedcreekcreative.com/img-sys/powered_by_cpanel.svg	69.49.245.172	200 OK	5.6 kB
URL GET HTTP/1.1 crookedcreekcreative.com/img-sys/powered_by_cpanel.svg IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5616) Size 5.6 kB (5617 bytes) Hash c47b4b5200566a2a496a11ba472ec5da 3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c 179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9 HTTP Headers `GET /img-sys/powered_by_cpanel.svg HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 08 Dec 2023 01:30:35 GMT Server: Apache Last-Modified: Thu, 27 Apr 2023 18:19:25 GMT Accept-Ranges: bytes Content-Length: 5617 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/svg+xml`

	crookedcreekcreative.com/favicon.ico	69.49.245.172	404 Not Found	10 kB
URL GET HTTP/1.1 crookedcreekcreative.com/favicon.ico IP 69.49.245.172:80 ASN #46606 UNIFIEDLAYER-AS-1 Requested by http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070) Size 10 kB (10116 bytes) Hash ed5fe05b81a0113f4f0d15d55b5e2173 369756a84a4ada6361ff190977d2800ff8d3c7c4 3fe13b8050a4235066b8e97b351cdf161c6dc0d764500f1ad6400866af962e4c HTTP Headers `GET /favicon.ico HTTP/1.1 Host: crookedcreekcreative.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://crookedcreekcreative.com////limp///////auth////////5czy0v///////amx1ZHdpZ0BjYW5hY2NvcmRnZW51aXR5LmNvbQ== Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 08 Dec 2023 01:30:35 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`