{"report_id":"d454231a-5556-49fe-9389-21f4e8b60fa5","version":0,"status":"done","tags":[],"date":"2026-09-09T18:48:56Z","url":{"schema":"http","addr":"creativeingredient.com/","fqdn":"creativeingredient.com","domain":"creativeingredient.com","tld":"com"},"ip":{"addr":"192.145.232.220","port":0,"asn":22611,"as":"InMotion Hosting, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"creativeingredient.com/","fqdn":"creativeingredient.com","domain":"creativeingredient.com","tld":"com"},"title":"creativeingredient.com/","dom":{"size":180,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2abadc76e49827ddd4cfc2aec3e5f5f7","sha1":"e97508e9ecb29d41fabbc102163c54429541b740","sha256":"1bbab2ad08691fdd8b9290cfa3ba58786a9dca65948b09c6e321096a29adb1de","sha512":"75fd3a3c6073435a352475914eb693c25366ae9018c61e9925a2888c76964d45aed34d95f5d800bd6ed202994d81f567b5ebb6c304878f94788d9a4a97b5b235","ssdeep":"","tlshash":"51c0c0f28920408614303c823ec47289530250cc832945c41bc0d494c0cc20cc861bd5","dom_hash":"domhash22d9f2442764181206d2f7cb032fad26","first_seen":"2025-11-23T09:14:19.951096Z","last_seen":"2026-09-09T18:48:57.212342Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"creativeingredient.com/","fqdn":"creativeingredient.com","domain":"creativeingredient.com","tld":"com"},"ip":{"addr":"192.145.232.220","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T18:48:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"creativeingredient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"creativeingredient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"creativeingredient.com","ip":{"addr":"192.145.232.220","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"2010-05-26","domain_rank":0,"first_seen":"2016-10-30T21:52:27Z","last_seen":"2025-11-23T09:14:19.810914Z","alert_count":4,"request_count":2,"received_data":5017,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"creativeingredient.com/","fqdn":"creativeingredient.com","domain":"creativeingredient.com","tld":"com"},"ip":{"addr":"192.145.232.220","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T18:48:27.209Z","timestamp":1788979707209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.creativeingredient.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 04:55:39 GMT","end":"Fri, 23 Oct 2026 04:55:38 GMT"},"fingerprint":{"sha1":"63:3B:82:51:1D:54:1E:CB:FA:4C:21:A5:08:EE:3B:7D:C3:AB:31:F6","sha256":"93:24:9F:3E:DD:73:6E:0F:89:0D:AF:72:6E:7A:48:E8:F7:08:B9:85:1B:BB:8A:8D:1D:3B:2D:96:56:21:4E:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: creativeingredient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Wed, 09 Sep 2026 18:48:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-proxy-cache: DISABLED\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145,"size_decoded":326,"mime_type":"text/html; charset=utf-8","magic":"ASCII text","md5":"5adaa553132cc743751db1b53e41e118","sha1":"3c3b150efb61fc26f945c121470c95a00e3917f8","sha256":"ce030b0fd0cb52c8e08cea9ab4f7dba284dfcccfb904f038cddd6417b36f2b4e","sha512":"54e50f8074deaa424f6fe38617b7ce6d6676ba73e9584826f7206f4ea6d5a12b09906aa28ac4c34ae60c7f60a38daac859f55531e8e52b0d0be7f8f6ef7e1066","ssdeep":"","tlshash":"bcc02b518e2480b280701c137758f11fa30350cdc33d41995f95c484c0dc64e85b4ed6","first_seen":"2025-11-23T09:14:19.952192Z","last_seen":"2026-09-09T18:48:57.213994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":361,"connect":169,"send":0,"wait":190,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"creativeingredient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"creativeingredient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creativeingredient.com/favicon.ico","fqdn":"creativeingredient.com","domain":"creativeingredient.com","tld":"com"},"ip":{"addr":"192.145.232.220","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creativeingredient.com/","date":"2026-09-09T18:48:28.646Z","timestamp":1788979708646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.creativeingredient.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 04:55:39 GMT","end":"Fri, 23 Oct 2026 04:55:38 GMT"},"fingerprint":{"sha1":"63:3B:82:51:1D:54:1E:CB:FA:4C:21:A5:08:EE:3B:7D:C3:AB:31:F6","sha256":"93:24:9F:3E:DD:73:6E:0F:89:0D:AF:72:6E:7A:48:E8:F7:08:B9:85:1B:BB:8A:8D:1D:3B:2D:96:56:21:4E:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: creativeingredient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://creativeingredient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Wed, 09 Sep 2026 18:48:28 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 13 Jan 2020 19:05:42 GMT\r\nvary: Accept-Encoding\r\netag: \"5e1cbf86-10be\"\r\nexpires: Wed, 16 Sep 2026 18:48:28 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/TYPE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4668,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d019c557286aafecd80e84c9e1d62013","sha1":"8e1fc65092d7e84a7bb4776c9974ce50dd53de8d","sha256":"b4d7532f25a1284d1e5e44b345c6cc3971ac77f2cea906021dfc011a0bd2a8b9","sha512":"75ff6b3c9531b1431d8195657512e7ba55eb4f7d6c97464a49d73a2eb64aeb174a16de409e91a00900662d5347d6c03c756f5f36ffc5b5c7c48f28c934ba77c6","ssdeep":"12:suqMRX6CXxv7P32XHXqXRgaNXtF+LXC7P3uLXVLX1xLXfZXjwD6XPSvRhXQrM9a:suqMsQz0CIJ1VV/warl","tlshash":"c49174243d388389d8e5073614bdcba3de13aff195ea1640a49c7867417a113d46e438","first_seen":"2023-04-28T20:32:03Z","last_seen":"2026-09-09T21:48:45.649069Z","times_seen":1990,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"creativeingredient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"creativeingredient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}