Report - nsjsu8.ktt55.my.id

Report Overview

Submitted URL
nsjsu8.ktt55.my.id
IP
172.67.175.76
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 15:37:34
Access
public
Website Title
Index of /
Final URL
nsjsu8.ktt55.my.id/
Tags
opendir
urlquery detections
Audit - Open directory

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nsjsu8.ktt55.my.id	unknown	unknown	No data	No data	2.7 kB	26 kB	104.21.17.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp
2024-04-29	medium	nsjsu8.ktt55.my.id/	WhatsApp

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.number.js	682 B	2023-03-07	2024-05-19
Pretty URL nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.number.js IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-19 09:50:18 Times Seen9296 Hash 377b82a88aeda884475d40fa1051c70a e7619035db4c628248b82237f3a99683e29ed7a4 5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07 Loading...

	nsjsu8.ktt55.my.id/	58 B	2023-04-05	2024-05-19
Pretty URL nsjsu8.ktt55.my.id/ IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 03:56:22 Last Seen2024-05-19 09:50:18 Times Seen3981 Hash 821524a21b9d31d8e5d87899a346e04a 92582c750f6ff8ddb212023b48fc49fe40891d75 7b0cac9d1c981314ca25d8d0f4c4dcf1b2dec8f0a8a5b46ee029c6754a9f7edc Loading...

	nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.js	7.7 kB	2023-03-07	2024-05-19
Pretty URL nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.js IP 104.21.17.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-19 09:50:18 Times Seen9293 Hash 0fa71bf6cb125ddac365683ea3352cb0 b94eeac8764b23ab614d148007c360fd2ab46f58 6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e Loading...

HTTP Transactions (6)

URL IP Response Size

nsjsu8.ktt55.my.id/favicon.ico

104.21.17.78

404 Not Found

5.0 kB

URL GET HTTP/3
nsjsu8.ktt55.my.id/favicon.ico
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nsjsu8.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
5.0 kB (5006 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsjsu8.ktt55.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Tue, 07 May 2024 15:37:13 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BCAspI5J0r6wa8KeFR%2Fhwg8Bzk8IJCXROQ4DxT7K8bQk3fmzi%2FFAJpAip29Z%2BecnNJX2mBQq02tymqi4uc41YGGZpzSxTcccXT1JvxaAkFfRL0h%2BfQxzJWrQc8vgvUmR%2BbQtKLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88024a40aeccb527-OSL
content-encoding: br

nsjsu8.ktt55.my.id/_autoindex/assets/css/autoindex.css

104.21.17.78

200 OK

7.1 kB

URL GET HTTP/3
nsjsu8.ktt55.my.id/_autoindex/assets/css/autoindex.css
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nsjsu8.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
ASCII text
Size
7.1 kB (7056 bytes)
Hash
590db3a115b1e82a26b09f98964030a5
e792179b620700c09bd763ebf3b5f163fd18f213
37e1e1cbb4256d8006ccfcc7c7c8e891276191714768291589b40483d3f0fe46

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /_autoindex/assets/css/autoindex.css HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsjsu8.ktt55.my.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 15:37:12 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 15:37:12 GMT
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MMrZ5BQsEGQbYOw92j%2BhJ66B8sZ1fUH2eO5I845EudxT2aLEo1PqdWSvuxa2H0vchxZnZPmfdH3CImzeGyOrrOYzqeHrwzMEMMEJ%2F3kx1UAopuNFWY2aEyopRZA11RBkF7xZpP0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88024a39c9f0b527-OSL
content-encoding: br

nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.number.js

104.21.17.78

200 OK

682 B

URL GET HTTP/3
nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.number.js
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nsjsu8.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (712), with no line terminators
Size
682 B (682 bytes)
Hash
8f87cacc94e1eacc5ca2c79436478048
2e19d7f9f49a594a8af90b660d19e40e60795513
e982b91f06affaff52ab9c5c38567dc129020becf7499a9c4e2d633757f814fd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsjsu8.ktt55.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:37:12 GMT
content-type: text/javascript
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJ51VlKqVsVus3UrStMYXHWVd%2B3DTfamxWB0dtd7X3RJG6EMOmgVOgpmblQTOiN%2BcAVwdLy5B7XhSWMR%2FC3JfP4Ihr%2ByzS%2BPytvTLMEtfZTDDjZsjCiNFEWahGFLlvF0lD7NLe4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88024a39d9feb527-OSL
content-encoding: br

nsjsu8.ktt55.my.id/_autoindex/assets/icons/folder-fill.svg

104.21.17.78

200 OK

591 B

URL GET HTTP/3
nsjsu8.ktt55.my.id/_autoindex/assets/icons/folder-fill.svg
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nsjsu8.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
SVG Scalable Vector Graphics image
Size
591 B (591 bytes)
Hash
a4f00f71e3678110b6f2a372de9026f6
5528572879e97e5adf5907fa04026c7a687ae811
6f2d3cf5a7b29c8c7434c2c9a926164b56594b1d3e09f2cc50a34a411586adb4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsjsu8.ktt55.my.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:37:13 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 14 May 2024 15:37:12 GMT
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mXw1N%2BeXKL7gbE2W%2FhZqOJ35j1pFkwFLauaTItuTT1ELR8RUcRgfYKTjxpQJHp%2BKvSGzCLXUdky5DGsj177uQ%2FG1LpmEc%2FhsKRFXrMyiesGtb03zmWgDzyQbt3HWbUG5MINNLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88024a39da01b527-OSL
content-encoding: br

nsjsu8.ktt55.my.id/

104.21.17.78

200 OK

1.3 kB

URL User Request GET HTTP/2
nsjsu8.ktt55.my.id/
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
HTML document, ASCII text, with very long lines (1337), with no line terminators
Size
1.3 kB (1262 bytes)
Hash
48e5347afa8007101e1f4fe7938a2865
d72668fe0f17d3e665f7a15b280ca087d0ca46e6
666b6b6b425e6159ebb2c470ea80c79373a9432003b8dbfe26afb101402d5a05

Detections

Analyzer	Verdict	Alert
urlquery	none	Audit - Open directory
OpenPhish	phishing	WhatsApp

HTTP Headers

GET / HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 15:37:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pRPD5zBGrRXaQkI6fGszZDNh1Iscejq2kPo8pIGZK94xjGAjXpAc9mKqpTybcZ%2BdAJyeJhlMs6U624woEIQly5VlejgDzblzSYplLCjQnT6VLXk368HZt4yFix%2Fn6FYZqcjeJrU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88024a2a0ed156a4-OSL
content-encoding: br
X-Firefox-Spdy: h2

nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.js

104.21.17.78

200 OK

7.7 kB

URL GET HTTP/3
nsjsu8.ktt55.my.id/_autoindex/assets/js/tablesort.js
IP
104.21.17.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nsjsu8.ktt55.my.id/
Certificate
IssuerGoogle Trust Services LLC
Subjectktt55.my.id
Fingerprint8A:ED:C5:91:EA:3A:47:4E:D2:1C:E4:11:78:2D:71:BC:1D:AA:DF:DE
ValiditySat, 16 Mar 2024 07:53:55 GMT - Fri, 14 Jun 2024 07:53:54 GMT

File type
JavaScript source, ASCII text, with very long lines (7985), with no line terminators
Size
7.7 kB (7706 bytes)
Hash
48ee22324334f5bca0df015bba23121a
0e0c5036636bbe9f10208208bb8613b4e1fb00f1
24c953fd5819693d6f0d13adaffb8669d299dce4e3001b2cbece6fd01ab7ef21

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /_autoindex/assets/js/tablesort.js HTTP/1.1
Host: nsjsu8.ktt55.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsjsu8.ktt55.my.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 15:37:12 GMT
content-type: text/javascript
last-modified: Mon, 11 Mar 2024 19:40:47 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VEIeVmOfqORPpqoScmfygb67P3P%2F%2FS0%2F9gbRTfxP3Z6MPmh4fLEm5kdlfvhHCT%2B6Zv1NoxT%2FnVSImlECVI0fk3K3%2FeLUXMdqEqd13j6lJCsQ8jp8LVVe7OZfol8GHymHJWiadUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88024a39d9f6b527-OSL
content-encoding: br

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP