{"report_id":"26cc9da7-3209-4441-a0f5-b53b938b7d04","version":6,"status":"done","tags":["opendir"],"date":"2025-02-21T00:25:28Z","url":{"schema":"http","addr":"25884382-66-20170407092534.webstarterz.com/ormmoney.com/","fqdn":"25884382-66-20170407092534.webstarterz.com","domain":"webstarterz.com","tld":"com"},"ip":{"addr":"163.44.198.42","port":0,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Thailand","country_code":"TH"},"final":{"url":{"schema":"http","addr":"25884382-66-20170407092534.webstarterz.com/ormmoney.com/","fqdn":"25884382-66-20170407092534.webstarterz.com","domain":"webstarterz.com","tld":"com"},"title":"Index of /ormmoney.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-02T00:25:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"25884382-66-20170407092534.webstarterz.com","ip":{"addr":"163.44.198.42","port":80,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Thailand","country_code":"TH"},"domain_registered":"2015-07-21","domain_rank":0,"first_seen":"2022-07-08T00:24:29Z","last_seen":"2025-02-21T00:25:15.172279Z","alert_count":1,"request_count":2,"received_data":1667,"sent_data":858,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"25884382-66-20170407092534.webstarterz.com/ormmoney.com/","fqdn":"25884382-66-20170407092534.webstarterz.com","domain":"webstarterz.com","tld":"com"},"ip":{"addr":"163.44.198.42","port":80,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Thailand","country_code":"TH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-21T00:24:59.382Z","timestamp":1740097499382,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /ormmoney.com/ HTTP/1.1\r\nHost: 25884382-66-20170407092534.webstarterz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Feb 2025 00:24:59 GMT\r\nServer: Apache\r\nContent-Length: 963\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html;charset=ISO-8859-1\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":963,"size_decoded":963,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, ASCII text","md5":"93f21142532745466007983b301f6ef0","sha1":"f69d3fb609cc145b59e3f97eb2edcb0ab19d3db5","sha256":"7865cdae42d797a8f803e34471821ff277f001c45f098718ee456721c57b0389","sha512":"9717a2abc94ce15fb63f63a820b10e06dce954a7c42863270e8481b5c428bb945f8fc872fb0b8ebec8a9a0cd53752a8fdc7777682dfccc75fe8e84587119e7b0","ssdeep":"","tlshash":"08110d49a9e062b75881251bd1407ddacbf685f983b149747c0fb883dbc9dfc81071a6","first_seen":"2025-02-21T00:25:29.450077Z","last_seen":"2025-02-21T00:25:29.450077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":211,"dns":1,"connect":213,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"http","addr":"25884382-66-20170407092534.webstarterz.com/favicon.ico","fqdn":"25884382-66-20170407092534.webstarterz.com","domain":"webstarterz.com","tld":"com"},"ip":{"addr":"163.44.198.42","port":80,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://25884382-66-20170407092534.webstarterz.com/ormmoney.com/","date":"2025-02-21T00:24:59.892Z","timestamp":1740097499892,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 25884382-66-20170407092534.webstarterz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://25884382-66-20170407092534.webstarterz.com/ormmoney.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 21 Feb 2025 00:25:00 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":315,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-05T13:24:01.699292Z","times_seen":145058,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}