{"report_id":"cee373fb-8f93-48c1-a8aa-53676474ca99","version":6,"status":"done","tags":["opendir"],"date":"2026-03-07T06:04:28Z","url":{"schema":"https","addr":"zoomaccess.us","fqdn":"zoomaccess.us","domain":"zoomaccess.us","tld":"us"},"ip":{"addr":"85.137.248.186","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"zoomaccess.us/","fqdn":"zoomaccess.us","domain":"zoomaccess.us","tld":"us"},"title":"Index of /","dom":{"size":933,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"875d7c9ac22e5ac56201ce7d10cbc9b0","sha1":"74c9117d3f9ad3f724d70cf929b72c7c3fcecc71","sha256":"cd60b7d8dd91c18127eac3f1033883915f9a0555204857b8c5df45a9fdc78abf","sha512":"36e406cf2b503a48125c4e00259d3d88d1a57b7d3f89a1b0c1a06c9f7690a906c46a8cefa8f1ce1b0a7c9b758c77a4d0cb07a7b33ea0a2c52e50133219c8a2d1","ssdeep":"","tlshash":"0811c645aae053b75c81251bd1407cca87f699b883b248707c0fbcc7db89dbc95071a6","dom_hash":"domhashb22d9d90ca62f0fdc5d0bbe857f160e2","first_seen":"2026-03-07T05:59:09.169739Z","last_seen":"2026-03-07T06:04:30.015415Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zoomaccess.us","fqdn":"zoomaccess.us","domain":"zoomaccess.us","tld":"us"},"ip":{"addr":"85.137.248.186","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T06:04:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"zoomaccess.us","ip":{"addr":"85.137.248.186","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-03-07T05:59:06.63598Z","last_seen":"2026-03-07T05:59:06.63598Z","alert_count":1,"request_count":2,"received_data":1695,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoomaccess.us/","fqdn":"zoomaccess.us","domain":"zoomaccess.us","tld":"us"},"ip":{"addr":"85.137.248.186","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T06:04:07.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us04web.zoomaccess.us","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 18:18:50 GMT","end":"Wed, 03 Jun 2026 18:18:49 GMT"},"fingerprint":{"sha1":"BD:FC:78:68:03:91:59:B5:44:80:89:A1:63:87:EB:14:A9:DD:99:99","sha256":"BE:9C:EA:D7:79:AF:C6:20:CF:00:09:A5:4E:F7:25:9D:15:B9:04:CA:A9:91:15:81:9F:5D:FA:4F:B0:59:1B:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoomaccess.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 06:04:07 GMT\r\nContent-Type: text/html;charset=ISO-8859-1\r\nContent-Length: 1011\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, ASCII text","md5":"76bceaa88ba0429e87978e0f397ba4d6","sha1":"c54c50b42f20ffd93eb95f7bcd78de5ee7603bc6","sha256":"227f9ff3b550dda910992b8eb504a41d65d03512e9f083072c4597b8139f1c8c","sha512":"368b572e9798bbc9be02cdc4088290ac5f64dc7ee77216acf3e1550b2f70bf23ef9741bb1b0befd2d409195e5a0a778862b7068031f8ba98af5227b933ed7039","ssdeep":"","tlshash":"92110449aae053b75881251bd1407dca87e289f883b248707c4fbcc3db88efc91071aa","first_seen":"2026-03-07T05:59:09.172735Z","last_seen":"2026-03-07T06:04:30.017008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":43,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"zoomaccess.us/favicon.ico","fqdn":"zoomaccess.us","domain":"zoomaccess.us","tld":"us"},"ip":{"addr":"85.137.248.186","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoomaccess.us/","date":"2026-03-07T06:04:07.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us04web.zoomaccess.us","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 18:18:50 GMT","end":"Wed, 03 Jun 2026 18:18:49 GMT"},"fingerprint":{"sha1":"BD:FC:78:68:03:91:59:B5:44:80:89:A1:63:87:EB:14:A9:DD:99:99","sha256":"BE:9C:EA:D7:79:AF:C6:20:CF:00:09:A5:4E:F7:25:9D:15:B9:04:CA:A9:91:15:81:9F:5D:FA:4F:B0:59:1B:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoomaccess.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoomaccess.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 06:04:07 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 355\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-05T07:26:02.769833Z","times_seen":54006,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}