Report - sjbrmxb.ktt55.my.id

Report Overview

Submitted URL
sjbrmxb.ktt55.my.id
IP
172.67.175.76
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 15:44:46
Access
public
Website Title
Index of /
Final URL
sjbrmxb.ktt55.my.id/
Tags
opendir
urlquery detections
Audit - Open directory

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sjbrmxb.ktt55.my.id	unknown	2023-09-21	2024-03-18	2024-04-05	2.7 kB	19 kB	104.21.17.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena
2024-05-02	medium	sjbrmxb.ktt55.my.id/	Garena

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.js	7.7 kB	2023-03-07	2024-05-19
Pretty URL sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.js IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-19 17:55:10 Times Seen9295 Hash 0fa71bf6cb125ddac365683ea3352cb0 b94eeac8764b23ab614d148007c360fd2ab46f58 6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e Loading...

	sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.number.js	682 B	2023-03-07	2024-05-19
Pretty URL sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.number.js IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-19 17:55:10 Times Seen9298 Hash 377b82a88aeda884475d40fa1051c70a e7619035db4c628248b82237f3a99683e29ed7a4 5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07 Loading...

	sjbrmxb.ktt55.my.id/	58 B	2023-04-05	2024-05-19
Pretty URL sjbrmxb.ktt55.my.id/ IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 03:56:22 Last Seen2024-05-19 17:55:10 Times Seen3982 Hash 821524a21b9d31d8e5d87899a346e04a 92582c750f6ff8ddb212023b48fc49fe40891d75 7b0cac9d1c981314ca25d8d0f4c4dcf1b2dec8f0a8a5b46ee029c6754a9f7edc Loading...

HTTP Transactions (6)

URL IP Response Size

sjbrmxb.ktt55.my.id/favicon.ico

104.21.17.78

404 Not Found

1.2 kB

URL GET HTTP/3
sjbrmxb.ktt55.my.id/favicon.ico
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sjbrmxb.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
HTML document, ASCII text, with very long lines (1276), with no line terminators
Size
1.2 kB (1238 bytes)
Hash
24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sjbrmxb.ktt55.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 07 May 2024 15:44:24 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=treUEj0kGHhysXCAWfQf3Vm%2FgN%2B7og6JdvjBJnOuJ3cUsL5voysUIrvOCNcMcS04eN2Gz2D1LLqoFYkCnn9ghu0FFRB%2BKCYwlyMi59MYsLbk0CydAwnBB0mbLPqmU%2FkC8%2BNiuDBi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880254c47f335688-OSL
content-encoding: br

sjbrmxb.ktt55.my.id/

104.21.17.78

200 OK

1.3 kB

URL User Request GET HTTP/2
sjbrmxb.ktt55.my.id/
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
HTML document, ASCII text, with very long lines (1338), with no line terminators
Size
1.3 kB (1263 bytes)
Hash
fdc503478d34bf3469c2584d19767575
30951b74d8f5d95a34de20d83f36181d882c41a2
e06ef8659bd26bd46adf8e5ebae4b4adf295e7e9928bd5c28fc7ef2bdc293b23

Detections

Analyzer	Verdict	Alert
urlquery	none	Audit - Open directory
OpenPhish	phishing	Garena

HTTP Headers

GET / HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 15:44:22 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6grTBVUBwa1tR16P3sG7djExa4Y2pCRdlP%2F1NT4uPpEa%2FbfbrbPeufBlf%2FWbP8rhdn4GJ4BpRnnC0%2FhbR5P%2BomwfOt7%2FSnO8qbyz%2FygovEMWwBN2gTZTj7ugg7NpdkjF7r3A7Hoy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880254b9fe22712e-OSL
content-encoding: br
X-Firefox-Spdy: h2

sjbrmxb.ktt55.my.id/_autoindex/assets/css/autoindex.css

104.21.17.78

200 OK

3.6 kB

URL GET HTTP/3
sjbrmxb.ktt55.my.id/_autoindex/assets/css/autoindex.css
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sjbrmxb.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
ASCII text, with very long lines (3886), with no line terminators
Size
3.6 kB (3562 bytes)
Hash
f0e6c3b07d745fab10f658b8044b0f24
10810678c5cae8d5c63bf3690740911be5a45544
5db3ee577f1f9e8f10401c65e72fe466a8f0c5bc7e3ae21dd350bf5fa3e81f9f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /_autoindex/assets/css/autoindex.css HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sjbrmxb.ktt55.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:44:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 15:44:23 GMT
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5OQlrL65y4ZKwI9J9PyMXBssPFNf0Y%2F9aN7S4osKYy6G4PLjjt60hWCzQ9km%2FjSedThE9vZQMT7rWjy%2FYD7f2oB%2BzweWC1e7K%2FgoLkRHpnI7SbEt9lhzIrE2%2FM%2B3RUkf56L31gRb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880254bf9e6d5688-OSL
content-encoding: br

sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.js

104.21.17.78

200 OK

7.7 kB

URL GET HTTP/3
sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.js
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sjbrmxb.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
JavaScript source, ASCII text, with very long lines (7985), with no line terminators
Size
7.7 kB (7706 bytes)
Hash
48ee22324334f5bca0df015bba23121a
0e0c5036636bbe9f10208208bb8613b4e1fb00f1
24c953fd5819693d6f0d13adaffb8669d299dce4e3001b2cbece6fd01ab7ef21

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /_autoindex/assets/js/tablesort.js HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sjbrmxb.ktt55.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:44:23 GMT
content-type: text/javascript
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2BJoUcjhgcTpHpCXHVWFh3gBMnL5kLaT7V8hOrm72ZFKM3%2F0V0VGm9L7L8JcUyz2xW6Z5F0IuS42oPwiVa6fOmRuoOw6irPmCtakVB5%2FpRmY5PUR37SwSaMPmtNhWF3PcJehZHvi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880254bf9e705688-OSL
content-encoding: br

sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.number.js

104.21.17.78

200 OK

682 B

URL GET HTTP/3
sjbrmxb.ktt55.my.id/_autoindex/assets/js/tablesort.number.js
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sjbrmxb.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (712), with no line terminators
Size
682 B (682 bytes)
Hash
8f87cacc94e1eacc5ca2c79436478048
2e19d7f9f49a594a8af90b660d19e40e60795513
e982b91f06affaff52ab9c5c38567dc129020becf7499a9c4e2d633757f814fd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sjbrmxb.ktt55.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:44:23 GMT
content-type: text/javascript
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Fb4Sr%2B78J87oVhhMo17x3DcYYICBNp6Cos3CYItJmkX%2BinTmyJ0kb6s1gjamcPBIJ6wGKpFMBPhhY8sSLCI%2BAut00nxxGhUcbaQisg2g7Ru3VKwxiPSBt7bMGQmSIOG6hEAMp8q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880254bfae7d5688-OSL
content-encoding: br

sjbrmxb.ktt55.my.id/_autoindex/assets/icons/folder-fill.svg

104.21.17.78

200 OK

591 B

URL GET HTTP/3
sjbrmxb.ktt55.my.id/_autoindex/assets/icons/folder-fill.svg
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sjbrmxb.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
SVG Scalable Vector Graphics image
Size
591 B (591 bytes)
Hash
a4f00f71e3678110b6f2a372de9026f6
5528572879e97e5adf5907fa04026c7a687ae811
6f2d3cf5a7b29c8c7434c2c9a926164b56594b1d3e09f2cc50a34a411586adb4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Garena

HTTP Headers

GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1
Host: sjbrmxb.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sjbrmxb.ktt55.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:44:23 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 15:44:23 GMT
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uHbDGKHQdufnUEb2nf%2F0BCE5xmZHusqJGI5n0VunRjKfI8XLB0zv9OAf9%2BHaWI6YznaStFo2HKuDnBkTf3E%2Fe4eaNdzbCP0rpmUKRi9sN58pUTreiwQT6BgcVAWEkavk%2FLrcMYOO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880254bfae8d5688-OSL
content-encoding: br

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN