{"report_id":"176cd952-5653-47c6-8ed5-9f74f2f23733","version":6,"status":"done","tags":["opendir"],"date":"2025-08-22T20:57:42Z","url":{"schema":"https","addr":"xn--sumr-dpa.money","fqdn":"xn--sumr-dpa.money","domain":"xn--sumr-dpa.money","tld":"money"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--sumr-dpa.money/","fqdn":"xn--sumr-dpa.money","domain":"xn--sumr-dpa.money","tld":"money"},"title":"Index of /"},"submit":{"url":{"schema":"https","addr":"xn--sumr-dpa.money","fqdn":"xn--sumr-dpa.money","domain":"xn--sumr-dpa.money","tld":"money"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-26T20:57:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"xn--sumr-dpa.money","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-22T20:57:42.479543Z","last_seen":"2025-08-22T20:57:42.479543Z","alert_count":1,"request_count":2,"received_data":2325,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--sumr-dpa.money/","fqdn":"xn--sumr-dpa.money","domain":"xn--sumr-dpa.money","tld":"money"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-22T20:57:21.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--sumr-dpa.money","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Tue, 05 Aug 2025 12:11:13 GMT","end":"Mon, 03 Nov 2025 09:36:00 GMT"},"fingerprint":{"sha1":"52:F4:8D:CE:5A:8A:B3:F5:80:EB:26:FF:DD:DB:5B:65:09:CE:F3:E9","sha256":"F4:01:81:0A:EA:E0:2A:F0:EB:6D:AE:B0:C4:9C:35:12:15:BF:62:A9:C9:77:DA:35:2B:BA:BD:80:D9:C2:84:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--sumr-dpa.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 Aug 2025 20:57:22 GMT\r\ncontent-type: text/html;charset=ISO-8859-1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRMIWOzGUDtGgLzFIyY815bhEoC2IpeVHJxNllSFQ5juNwB0We28AKMi4Xq5KtoA34dFG6J8eM6E3BQBmRv3ClN4tM%2Fqq%2FDgbnyDgcdXNFHtSA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9735483c2a4fad45-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":623,"size_decoded":0,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, ASCII text","md5":"c885578c87527c66ab471c399668bb8f","sha1":"436232acc90dd18ad762c7e1ee4a97f3dcf82894","sha256":"4b6bd4cf3f74a8df5032c21716d29ddd85e7f4de815ecbaac04f01b95a2ba4dd","sha512":"370681e87d42ebeaf8e4110a6b7d4d318e548ffe45fb52db7d28e78f42df7fb7b5e7a5f6ac87cc501dc4e1364039849fc02e8a6b21739645b0e74f21a62a62ec","ssdeep":"","tlshash":"2bf04246a4d422b72c95351f80807dcac6f2c1b983b14db43c0fb493cb85ef895071e9","first_seen":"2025-08-22T20:57:45.936581Z","last_seen":"2025-08-22T20:57:45.936581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2786,"timings":{"blocked":1325,"dns":8,"connect":8,"send":0,"wait":130,"receive":0,"ssl":1312},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"xn--sumr-dpa.money/favicon.ico","fqdn":"xn--sumr-dpa.money","domain":"xn--sumr-dpa.money","tld":"money"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--sumr-dpa.money/","date":"2025-08-22T20:57:22.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--sumr-dpa.money","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Tue, 05 Aug 2025 12:11:13 GMT","end":"Mon, 03 Nov 2025 09:36:00 GMT"},"fingerprint":{"sha1":"52:F4:8D:CE:5A:8A:B3:F5:80:EB:26:FF:DD:DB:5B:65:09:CE:F3:E9","sha256":"F4:01:81:0A:EA:E0:2A:F0:EB:6D:AE:B0:C4:9C:35:12:15:BF:62:A9:C9:77:DA:35:2B:BA:BD:80:D9:C2:84:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xn--sumr-dpa.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--sumr-dpa.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 22 Aug 2025 20:57:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ec2%2BVCho2BN2dIugl9I50o6y7N3LE7KG2LxAg3tP2bzFeyi7Nv%2BnXxkqrRwO8wHWX3pCFiU2P2yKVH5mMLZZBbEQdtpI1gEL3xL%2Ba6%2BmQIkO3A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9735483e1dc2ad45-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-19T19:22:32.166379Z","times_seen":146794,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
