{"report_id":"455623cf-be8d-421a-83dd-b6eff300d623","version":6,"status":"done","tags":["opendir"],"date":"2026-01-14T21:01:26Z","url":{"schema":"https","addr":"devicecheck-us-exodus.com","fqdn":"devicecheck-us-exodus.com","domain":"devicecheck-us-exodus.com","tld":"com"},"ip":{"addr":"190.97.166.172","port":0,"asn":27956,"as":"Cyber Cast International, S.A.","country":"Panama","country_code":"PA"},"final":{"url":{"schema":"https","addr":"devicecheck-us-exodus.com/","fqdn":"devicecheck-us-exodus.com","domain":"devicecheck-us-exodus.com","tld":"com"},"title":"Index of /","dom":{"size":580,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"42baebf63cebd4344f35f23a43b560f8","sha1":"7882abc3231f8012c83ad45b90cbb1a6a3450c3a","sha256":"38ea56b4bbf65cfb9b8dc5edd89b247e03b37890ac4f99e705ce901beec513dd","sha512":"ccf318a7d48bff04eda4f46adc344fb74fbca741518097d8054dae11e925dfe005bf7ed2ef9d5fca612fc69fcc1241b1164a4bb57b2861ac755c5e5eda447147","ssdeep":"","tlshash":"fbf0f68aa5d422bb3c51361fc4407cca8af6c4b982b19db07c0fb897cb45eb495072e5","dom_hash":"domhash6bc22f81b9c0fe616439e7fc6f9216cc","first_seen":"2026-01-14T21:01:30.265317Z","last_seen":"2026-01-14T21:01:30.265317Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"devicecheck-us-exodus.com","fqdn":"devicecheck-us-exodus.com","domain":"devicecheck-us-exodus.com","tld":"com"},"ip":{"addr":"190.97.166.172","port":0,"asn":27956,"as":"Cyber Cast International, S.A.","country":"Panama","country_code":"PA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T21:01:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"devicecheck-us-exodus.com","ip":{"addr":"190.97.166.172","port":443,"asn":27956,"as":"Cyber Cast International, S.A.","country":"Panama","country_code":"PA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":2,"received_data":1466,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"devicecheck-us-exodus.com/","fqdn":"devicecheck-us-exodus.com","domain":"devicecheck-us-exodus.com","tld":"com"},"ip":{"addr":"190.97.166.172","port":443,"asn":27956,"as":"Cyber Cast International, S.A.","country":"Panama","country_code":"PA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T21:01:05.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.devicecheck-us-exodus.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:16:08 GMT","end":"Fri, 10 Apr 2026 13:16:07 GMT"},"fingerprint":{"sha1":"88:21:A0:5B:90:F9:64:B6:51:67:35:AE:17:BC:61:66:08:D7:5C:5B","sha256":"7E:66:15:EC:5A:D8:09:F9:D4:6C:94:B6:4D:3F:C9:CD:B9:38:1A:5B:71:09:3A:6E:64:BB:51:D6:94:35:E0:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: devicecheck-us-exodus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 14 Jan 2026 21:01:01 GMT\r\nContent-Type: text/html;charset=ISO-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":658,"size_decoded":0,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, ASCII text","md5":"d050b9fb5f7a91c202a13ab54c3231d2","sha1":"162f684d381760b2d3908b7ebf282fc1ed80939f","sha256":"940ff38acd0037b74b1d3b395dc5c26533c427437a687f06d41107d5614ec3d0","sha512":"99e37561ba708bb7e0ecca18bacd2dfb9931ac67f04b1279959ed57dc8471059dd72cfb886a4218723cbbb1208dfe385a612fc1a40301c737577d3a784955926","ssdeep":"","tlshash":"3d01498aa4e022b72882761a90807dca85e2c1b982f14db43c0fb893cb44ef891171e9","first_seen":"2026-01-14T21:01:30.268703Z","last_seen":"2026-01-14T21:01:30.268703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1245,"timings":{"blocked":538,"dns":196,"connect":157,"send":0,"wait":157,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"devicecheck-us-exodus.com/favicon.ico","fqdn":"devicecheck-us-exodus.com","domain":"devicecheck-us-exodus.com","tld":"com"},"ip":{"addr":"190.97.166.172","port":443,"asn":27956,"as":"Cyber Cast International, S.A.","country":"Panama","country_code":"PA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://devicecheck-us-exodus.com/","date":"2026-01-14T21:01:06.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.devicecheck-us-exodus.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:16:08 GMT","end":"Fri, 10 Apr 2026 13:16:07 GMT"},"fingerprint":{"sha1":"88:21:A0:5B:90:F9:64:B6:51:67:35:AE:17:BC:61:66:08:D7:5C:5B","sha256":"7E:66:15:EC:5A:D8:09:F9:D4:6C:94:B6:4D:3F:C9:CD:B9:38:1A:5B:71:09:3A:6E:64:BB:51:D6:94:35:E0:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: devicecheck-us-exodus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devicecheck-us-exodus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 14 Jan 2026 21:01:02 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-11T09:57:44.135177Z","times_seen":55942,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}