{"report_id":"9e1927ad-2d5f-4ccc-b65c-06549b479733","version":0,"status":"done","tags":["opendir"],"date":"2026-07-12T21:58:30Z","url":{"schema":"http","addr":"us05webzoom-business.com","fqdn":"us05webzoom-business.com","domain":"us05webzoom-business.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"us05webzoom-business.com/","fqdn":"us05webzoom-business.com","domain":"us05webzoom-business.com","tld":"com"},"title":"Index of /","dom":{"size":983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e9e410781f56a425f32d4bbf9f824c5f","sha1":"cc41aecfd0846fb957e94e3820ec603c6566fa17","sha256":"fbf5817cf8f0d85c141f277d985655e108feb9cf420fa9798d63e35487638366","sha512":"09005905eadf3ca99492cad8a2ce41ade3c84efaf6fd381f00d0afab12cbf630b94a2cd6e4a02c366ec370c6b1b0e99cd140397afe1d1f0f338a7945c4199839","ssdeep":"","tlshash":"7e112b49a5d121bb5c912a2fd1407dc987ead5f883b109243c4f7cd7db849bc821b2d2","dom_hash":"domhashb22d9d90ca62f0fdc5d0bbe857f160e2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us05webzoom-business.com","fqdn":"us05webzoom-business.com","domain":"us05webzoom-business.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:58:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"us05webzoom-business.com","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-07-11T07:24:31.421693Z","last_seen":"2026-07-11T07:24:31.421693Z","alert_count":5,"request_count":2,"received_data":1977,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us05webzoom-business.com/","fqdn":"us05webzoom-business.com","domain":"us05webzoom-business.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:58:04.339Z","timestamp":1783893484339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"us05webzoom-business.com.su04vebzoom.us","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 08:31:05 GMT","end":"Wed, 07 Oct 2026 08:31:04 GMT"},"fingerprint":{"sha1":"E5:B4:0D:53:6E:25:64:B6:60:49:5D:0D:94:90:3C:62:11:9D:6B:A1","sha256":"39:8D:5E:34:76:43:FC:9D:95:8B:68:74:E0:7A:3E:76:04:E3:75:66:6C:3F:68:D1:7F:6D:98:25:8A:84:76:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us05webzoom-business.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 21:58:04 GMT\r\ncontent-type: text/html;charset=ISO-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1061,"size_decoded":722,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, ASCII text","md5":"581f171ce8743a29680b166b964d3c43","sha1":"2cbcacab47c94f3a9ed5dd2e8eb4b5250d345f95","sha256":"ff87a49d969ae3e360e306ea9e02607d8ef285f5a384d6f54e34aafcd0527061","sha512":"c3587d40cc10ccd77a3b1f2b2e3703e1afd268bc281e5eb7c05f64914b56c39aafc4b6b93290b93adf293c82cdccfacdfb00309d7f5db55c3794d79ee5048987","ssdeep":"","tlshash":"a2115c4995d061b758913a1fd1407ec996eac6f983b109243c8f78c3d784afc821b196","first_seen":"2026-07-12T21:58:32.280268Z","last_seen":"2026-07-12T21:58:32.280268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":117,"connect":49,"send":0,"wait":90,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"us05webzoom-business.com/favicon.ico","fqdn":"us05webzoom-business.com","domain":"us05webzoom-business.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us05webzoom-business.com/","date":"2026-07-12T21:58:04.960Z","timestamp":1783893484960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"us05webzoom-business.com.su04vebzoom.us","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 08:31:05 GMT","end":"Wed, 07 Oct 2026 08:31:04 GMT"},"fingerprint":{"sha1":"E5:B4:0D:53:6E:25:64:B6:60:49:5D:0D:94:90:3C:62:11:9D:6B:A1","sha256":"39:8D:5E:34:76:43:FC:9D:95:8B:68:74:E0:7A:3E:76:04:E3:75:66:6C:3F:68:D1:7F:6D:98:25:8A:84:76:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us05webzoom-business.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us05webzoom-business.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 21:58:04 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":510,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-13T08:18:34.491172Z","times_seen":44880,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"us05webzoom-business.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}