Report - steeruhat.com/

Report Overview

Visited public
2024-09-29 16:40:58
Tags
Submit Tags
URL
steeruhat.com/
Finishing URL
steeruhat.com/
IP / ASN
104.21.94.122
#13335 CLOUDFLARENET
Title
Participate in Our Exclusive Online Survey: Share Your Insight

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
steeruhat.com	unknown	2024-07-16	2024-07-16 11:14:52	2024-09-26 18:38:58	5.3 kB	271 kB	172.67.223.110
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-28 18:12:10	1.3 kB	3.5 kB	23.36.77.32
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-28 18:12:41	1.3 kB	3.6 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed
2024-09-29	medium	steeruhat.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	From	Size	First Seen	Last Seen
	steeruhat.com/_next/static/chunks/5313-301aaffc9ebabfe2.js	ScriptElement	8.2 kB	2024-09-23	2024-10-29
Pretty URL steeruhat.com/_next/static/chunks/5313-301aaffc9ebabfe2.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-23 18:25 Last Seen2024-10-29 22:52 Times Seen1490 Hash 7378534d5cd1c68613b23495b5ecc5ce 99da46ee118507ba434e06f72b582ba40632fc26 b7a8bcfc4d4b814fa18deab63c1b77ea42fad9dd3f617404698aa97b2fc1339c Loading...

	steeruhat.com/	ScriptElement	115 B	2024-08-22	2024-10-27
Pretty URL steeruhat.com/ IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-22 17:16 Last Seen2024-10-27 21:46 Times Seen922 Hash b53a0dbb91e93fabde030b9ac7608367 c820962d7a57c86695cba90a3050ae8baaf6130e b02aee6ef99ebe27b318a7b3ed5694c9a5b81d92608ba019b748a940054753db Loading...

	steeruhat.com/	ScriptElement	498 B	2024-09-10	2024-10-04
Pretty URL steeruhat.com/ IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-09-10 14:49 Last Seen2024-10-04 11:24 Times Seen361 Hash 373b669931f9f40ef039b68bb3ff2ed4 8d800c0f984084f63875366ac76aec4cd6dde5fd d5c21358a4390a88b3f695e3f0f263f732ddb390a6fc6a1ff7de421ed3e855be Loading...

	steeruhat.com/	ScriptElement	2.8 kB	2024-08-21	2024-10-27
Pretty URL steeruhat.com/ IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 12:55 Last Seen2024-10-27 21:46 Times Seen931 Hash 442f9bb533623f8c007ace1f039be9c6 e631aceee3393cd23387a97d88924b83c2353e9a 2848ab6e4d9ebd41f4d50ba74ee6bea13bebfb1796e080f88c4bf8e2d2c7e239 Loading...

	steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_buildManifest.js	ScriptElement	1.3 kB	2024-09-27	2024-10-04
Pretty URL steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_buildManifest.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-27 15:26 Last Seen2024-10-04 11:27 Times Seen210 Hash 926da1bec264ebc3fa9b135c2c55ee9e 22650759e67f3a7f41b55ab26fcdefbd0c0b630b 7b2a3178ba021bcc2e819eb1f66db8730a806534116b7be14bfa4bca235b55cb Loading...

	steeruhat.com/	ScriptElement	28 B	2024-06-07	2024-10-27
Pretty URL steeruhat.com/ IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-06-07 10:07 Last Seen2024-10-27 21:46 Times Seen1750 Hash b507f8ef9a28424fd62ae549501f8e27 81bdfb0c2cfd756ec2f0074107bb41cba75596de 55215259109e6f83a2035705b514b9a3a9054279d30f70f35fd79cb6a62be69d Loading...

	steeruhat.com/_next/static/chunks/main-7a75ff3b0e9a5ceb.js	ScriptElement	110 kB	2024-09-04	2024-10-25
Pretty URL steeruhat.com/_next/static/chunks/main-7a75ff3b0e9a5ceb.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-04 15:20 Last Seen2024-10-25 10:25 Times Seen1793 Hash eeef108ca819f6315447cf06865dc84b b1650d7d5eb5c4209dd7cb8ed51feaf3c925a5aa 928babe6b0db9d959278d6d8532161434c207bc3f933c923f1b4d3b63126a605 Loading...

	steeruhat.com/_next/static/chunks/1093-3da7ee174fb5fccc.js	ScriptElement	21 kB	2024-09-27	2024-10-04
Pretty URL steeruhat.com/_next/static/chunks/1093-3da7ee174fb5fccc.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-27 14:34 Last Seen2024-10-04 11:27 Times Seen114 Hash 847db562e2cdd29f5f1574cccce8d85d 702e6f9394029f1bad78fd7f8408ca1a8859bcee 33d68893d05dfa36330a0e03b466b61f3f928432bba675da14c0cd55283d52c6 Loading...

	steeruhat.com/_next/static/chunks/pages/_app-224733de957e1257.js	ScriptElement	54 kB	2024-09-27	2024-10-04
Pretty URL steeruhat.com/_next/static/chunks/pages/_app-224733de957e1257.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-27 15:26 Last Seen2024-10-04 11:27 Times Seen208 Hash 8f23c43fb1b894aeaa8bd2ced7dd649e bf83d14c66976693a1b41cf6071b906bd8b70ced 88be373d784a7176317b34c7458c14236c0afbe02290628cdf44823a3e7ea109 Loading...

	steeruhat.com/_next/static/chunks/pages/index-468b2dd3f0286e55.js	ScriptElement	9.7 kB	2024-09-27	2024-10-04
Pretty URL steeruhat.com/_next/static/chunks/pages/index-468b2dd3f0286e55.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-27 18:05 Last Seen2024-10-04 11:24 Times Seen76 Hash e8d35b05e99a682a425866c58c1df830 d1160b4f7182da1208bd4142b81fac1512447088 46bb3a5c859172f2ea2853ae242ab719dbb5eb6b6f95dff77148edf6bb4222d2 Loading...

	steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_ssgManifest.js	ScriptElement	134 B	2024-01-31	2025-04-16
Pretty URL steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_ssgManifest.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-31 16:47 Last Seen2025-04-16 11:01 Times Seen9660 Hash 5af451de5239a70857cf148059518454 d6735fa6bfc3626a57b75af27472aead7bbbcfd2 44c6c8a145065314f0fcf7e1a9624f4f73f49136ffdb9441199ec7166c6bfe33 Loading...

	steeruhat.com/	ScriptElement	30 B	2024-08-28	2024-10-27
Pretty URL steeruhat.com/ IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-28 17:28 Last Seen2024-10-27 21:46 Times Seen849 Hash dbd18615369a2c6dd28490f7d4dfd92f 91c65d41dab8a6028888d8ce3ba03ad0d413806d a8733def7d52af46f6d922d4cf47f104b1f29b371aa2c0d2d8ab4e284ed596bb Loading...

	steeruhat.com/_next/static/chunks/webpack-89c9b79f72ea3321.js	ScriptElement	7.3 kB	2024-09-27	2024-10-04
Pretty URL steeruhat.com/_next/static/chunks/webpack-89c9b79f72ea3321.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-27 15:26 Last Seen2024-10-04 11:27 Times Seen215 Hash ede673b431703b8cf9677dac5e56c079 c97e547ddb7131e830c9ee63ee2c09ddc59c4038 9a8001e763e3fd0f62f19ec8ae6778ba6c280f02f5b24027427a765ee587f2a7 Loading...

	steeruhat.com/_next/static/chunks/framework-f3a5861786cc8e61.js	ScriptElement	27 kB	2024-09-04	2025-01-27
Pretty URL steeruhat.com/_next/static/chunks/framework-f3a5861786cc8e61.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-04 12:59 Last Seen2025-01-27 06:29 Times Seen3751 Hash 405295ad54872f95616ad4a6c5825af1 08c7947a0f01af2c9d2bbe966003667ef3ac1dfa b3f17c2e245d66acc87ac6add2462d56afd8a26c410a180381a37884a02aae00 Loading...

	steeruhat.com/_next/static/chunks/1658-4a1fa007dc959763.js	ScriptElement	30 kB	2024-09-17	2024-11-25
Pretty URL steeruhat.com/_next/static/chunks/1658-4a1fa007dc959763.js IP 172.67.223.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-17 18:13 Last Seen2024-11-25 04:29 Times Seen1274 Hash 45e374b70a5904938f24b23640e31888 7c38c10b8b6040cc4c0ce25d2aed503f81b9513e 7ed197e99e747ce5e97ae07fc1e728713132a18bbea23f10a7b5530ab0c53a3d Loading...

HTTP Transactions (21)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d070dea5a1c30c330443d09132734e63
3ca8c0f7cd2afd3a26da8bbe3f8a47c5995294f4
4868faf0cf6c4f9bd0d7db49dcde0b7358890c362d5281a233ab666a702e1741

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4868FAF0CF6C4F9BD0D7DB49DCDE0B7358890C362D5281A233AB666A702E1741"
Last-Modified: Sat, 28 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16875
Expires: Sun, 29 Sep 2024 21:21:47 GMT
Date: Sun, 29 Sep 2024 16:40:32 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dbde5c5adbbd6a8e97882b8268361ce9
d8857cca329a8ee2f9f6af7d4e534e394d9d59f1
dcd0a39d2797b3578c25899fd889c37ff54980f9dbc1888dce17d6512539e9f0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DCD0A39D2797B3578C25899FD889C37FF54980F9DBC1888DCE17D6512539E9F0"
Last-Modified: Sun, 29 Sep 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5294
Expires: Sun, 29 Sep 2024 18:08:46 GMT
Date: Sun, 29 Sep 2024 16:40:32 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
7a008f7018d5b98d787afdc07ddf2066
88ae935b7f05301000668ad6fb1d83f6a86e82b4
d98004d3571e1a51d26420f00a34d03ba467da831291574a99d2a920aabc60de

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D98004D3571E1A51D26420F00A34D03BA467DA831291574A99D2A920AABC60DE"
Last-Modified: Fri, 27 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2634
Expires: Sun, 29 Sep 2024 17:24:26 GMT
Date: Sun, 29 Sep 2024 16:40:32 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
0022a313549913e03a094e19581464e7
518165fb7850f5048e1524c19193aba831562d90
ba294daa7e0cb6dc5779cc4e80bd489e705ad3a3d9c8eaade953dc3f1a10fcfb

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BA294DAA7E0CB6DC5779CC4E80BD489E705AD3A3D9C8EAADE953DC3F1A10FCFB"
Last-Modified: Sun, 29 Sep 2024 06:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16151
Expires: Sun, 29 Sep 2024 21:09:44 GMT
Date: Sun, 29 Sep 2024 16:40:33 GMT
Connection: keep-alive

GET steeruhat.com/_next/static/chunks/1093-3da7ee174fb5fccc.js

172.67.223.110

200 OK

3.7 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/1093-3da7ee174fb5fccc.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (20968), with no line terminators
Size
3.7 kB (3716 bytes)
Hash
847db562e2cdd29f5f1574cccce8d85d
702e6f9394029f1bad78fd7f8408ca1a8859bcee
33d68893d05dfa36330a0e03b466b61f3f928432bba675da14c0cd55283d52c6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/1093-3da7ee174fb5fccc.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-51e8"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fObQkb%2Fz%2BWfr3KC0%2FnpnqfNiPeCk0%2FENVHkyMwMpvo7%2FcMg4L4KOu1oTHfrX%2FwAISVt7ucx%2Fd5%2F6td%2FfRLSi%2BBwEy1iaRsLUBYwm3qVGRKcEdAgS8HPDMdH86T1uolyb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1facb788-AMS
content-encoding: br

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dfedf5b10ed23db78cab4d0e5943dbbb
6e0d497c63bd73836ac42bb2fe0b859cdbfd1a5f
d9ac18f65cd9e42c677c8607bfdc0811b73e6c711804f4b5ae78ac30a59c71a4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D9AC18F65CD9E42C677C8607BFDC0811B73E6C711804F4B5AE78AC30A59C71A4"
Last-Modified: Fri, 27 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5925
Expires: Sun, 29 Sep 2024 18:19:20 GMT
Date: Sun, 29 Sep 2024 16:40:35 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dfedf5b10ed23db78cab4d0e5943dbbb
6e0d497c63bd73836ac42bb2fe0b859cdbfd1a5f
d9ac18f65cd9e42c677c8607bfdc0811b73e6c711804f4b5ae78ac30a59c71a4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D9AC18F65CD9E42C677C8607BFDC0811B73E6C711804F4B5AE78AC30A59C71A4"
Last-Modified: Fri, 27 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5925
Expires: Sun, 29 Sep 2024 18:19:20 GMT
Date: Sun, 29 Sep 2024 16:40:35 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dfedf5b10ed23db78cab4d0e5943dbbb
6e0d497c63bd73836ac42bb2fe0b859cdbfd1a5f
d9ac18f65cd9e42c677c8607bfdc0811b73e6c711804f4b5ae78ac30a59c71a4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D9AC18F65CD9E42C677C8607BFDC0811B73E6C711804F4B5AE78AC30A59C71A4"
Last-Modified: Fri, 27 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5879
Expires: Sun, 29 Sep 2024 18:18:34 GMT
Date: Sun, 29 Sep 2024 16:40:35 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dfedf5b10ed23db78cab4d0e5943dbbb
6e0d497c63bd73836ac42bb2fe0b859cdbfd1a5f
d9ac18f65cd9e42c677c8607bfdc0811b73e6c711804f4b5ae78ac30a59c71a4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D9AC18F65CD9E42C677C8607BFDC0811B73E6C711804F4B5AE78AC30A59C71A4"
Last-Modified: Fri, 27 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5925
Expires: Sun, 29 Sep 2024 18:19:20 GMT
Date: Sun, 29 Sep 2024 16:40:35 GMT
Connection: keep-alive

GET steeruhat.com/_next/static/chunks/5313-301aaffc9ebabfe2.js

172.67.223.110

200 OK

12 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/5313-301aaffc9ebabfe2.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (8177), with no line terminators
Size
12 kB (11705 bytes)
Hash
7378534d5cd1c68613b23495b5ecc5ce
99da46ee118507ba434e06f72b582ba40632fc26
b7a8bcfc4d4b814fa18deab63c1b77ea42fad9dd3f617404698aa97b2fc1339c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/5313-301aaffc9ebabfe2.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-1ff1"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8E7hzLJlU4YV4O3TZ1xvWpCYLoBc7opriQO%2F%2FGyWK7x9Vurc9PpDBs6Xl0l%2BHfdyBmOVvve0he%2BRDnm9wVL1WS7voNunZoAo66P1xwOLIWeOOweNaGWHA%2BcXpoMamPH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fafb788-AMS
content-encoding: br

GET steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_buildManifest.js

172.67.223.110

200 OK

1.3 kB

URL GET HTTP/3
steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_buildManifest.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
ASCII text, with very long lines (1394), with no line terminators
Size
1.3 kB (1316 bytes)
Hash
93203691a19a296d8527c443f1e99e9c
522041d90f3576c49700a5babb8874c86c3b55e9
974c2644ba863dd8b75f043acc9de5347c44cf918370ace6d63f5c84fa971371

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/kqWXgqMucf9vuIzBc7908/_buildManifest.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-524"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n9mKKbyUCeYNKRx5tJwopxX4l6bKhr687%2Fob9gMVAgj0UQL3RNJ8t7u%2FjgpSPMwLgmM7Ci87m3yaVCepDEofOQPGC0t08p9hrV6xvr8HDtIJvwmKUkDrwHFrcu%2F41wCM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fb4b788-AMS
content-encoding: br

GET steeruhat.com/_next/static/chunks/framework-f3a5861786cc8e61.js

172.67.223.110

200 OK

27 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/framework-f3a5861786cc8e61.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (26670), with no line terminators
Size
27 kB (26670 bytes)
Hash
405295ad54872f95616ad4a6c5825af1
08c7947a0f01af2c9d2bbe966003667ef3ac1dfa
b3f17c2e245d66acc87ac6add2462d56afd8a26c410a180381a37884a02aae00

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/framework-f3a5861786cc8e61.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-682e"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8J5noDIUDI2a43ie6BsDIigZVIS798NlubP0MQ9ia0NkAyim3kLFx3A1pG9%2B%2BLKxnBch%2FGBfvlxwVF4iqz11fVrrokXYNelb0p0hpK4jotQfsvFN3iuw%2FsEbMihzX66N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1f9eb788-AMS
content-encoding: br

GET steeruhat.com/_next/static/chunks/pages/_app-224733de957e1257.js

172.67.223.110

200 OK

54 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/pages/_app-224733de957e1257.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (54155), with no line terminators
Size
54 kB (54155 bytes)
Hash
8f23c43fb1b894aeaa8bd2ced7dd649e
bf83d14c66976693a1b41cf6071b906bd8b70ced
88be373d784a7176317b34c7458c14236c0afbe02290628cdf44823a3e7ea109

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/pages/_app-224733de957e1257.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-d38b"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qQi0NfpbzudmuLFa5pKRAxy2kOJkwxIaca8jUvBpJUxmamJ63zDbVj3vy7JEDViJB4pVIupKj%2FdjVyXgJBJ%2B%2BcvDm8lijRnlBZ0d2lG9p8XTmh7GwF6R7qPE4FM2Qytq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fa6b788-AMS
content-encoding: br

GET steeruhat.com/_next/static/chunks/1658-4a1fa007dc959763.js

172.67.223.110

200 OK

30 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/1658-4a1fa007dc959763.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (30034), with no line terminators
Size
30 kB (30034 bytes)
Hash
45e374b70a5904938f24b23640e31888
7c38c10b8b6040cc4c0ce25d2aed503f81b9513e
7ed197e99e747ce5e97ae07fc1e728713132a18bbea23f10a7b5530ab0c53a3d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/1658-4a1fa007dc959763.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-7552"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lD1VgjJbGeYW7udAo6%2FkSIjUFy4u%2FiKv7IGzcjxLbZYbVbg%2FGulKYFtTm%2FB2kLup61i9j8CBQ%2BY60XNcr8bg21mfdGctLciUG9xaxs%2B2zmeUK29iNtGuCoSYsUfoVZlw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fa9b788-AMS
content-encoding: br

GET steeruhat.com/

172.67.223.110

200 OK

5.7 kB

URL User Request GET HTTP/2
steeruhat.com/
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
HTML document, ASCII text, with very long lines (5878), with no line terminators
Size
5.7 kB (5676 bytes)
Hash
4399ce3338a933049b4d64add4518918
0318d40db0972832d8f36e55c71ff7d30f5e99f0
9a3ae4b3c57c5e0558010250cb8fbb022ced5ba9c1ed437d92838fc162c5e71c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: text/html
last-modified: Fri, 27 Sep 2024 13:20:12 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9UAag0MC1ytTxdqnMYIkjzOjeK1LLFN6vTMn76SWB1iZ85PM5WRJzHAZ4dArbw%2FEjFxjCKvelXMmtYu9mIWpzBJ%2B4x903eqY7SNRzNcCeZmqdM3H2epuzVP3dktjrklN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cad6a67db53b95c-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET steeruhat.com/_next/static/chunks/main-7a75ff3b0e9a5ceb.js

172.67.223.110

200 OK

110 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/main-7a75ff3b0e9a5ceb.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
110 kB (109698 bytes)
Hash
eeef108ca819f6315447cf06865dc84b
b1650d7d5eb5c4209dd7cb8ed51feaf3c925a5aa
928babe6b0db9d959278d6d8532161434c207bc3f933c923f1b4d3b63126a605

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/main-7a75ff3b0e9a5ceb.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=109699
etag: W/"66f6b10b-1ac83"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvCqfsz2h064yT4NtArcV19AR%2F%2BZW0lfbxp7QVhk3Y821mbcqOHGayDeV%2Bml6TGb%2FjphmfW0qj77iV8XGIvxV3XLm5MtLAZHGK34xovirV4KfnjQ33xbrEi9Z8pO3mJM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fa3b788-AMS
content-encoding: br

GET steeruhat.com/_next/static/chunks/pages/index-468b2dd3f0286e55.js

172.67.223.110

200 OK

9.7 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/pages/index-468b2dd3f0286e55.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (9946), with no line terminators
Size
9.7 kB (9682 bytes)
Hash
d209fb3979cffacea9d16a78d3d8b93a
aa625d5eadcd721fae63505c8ca81d3bc613195a
a46e5d5289dfb6ba25bd0edcbbef9ca320fd336ea5d6a7a449d00e9fba16da49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/pages/index-468b2dd3f0286e55.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-25d2"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvSWc8v7EgBkYd3bmOAsBoI0wUWE3XQWDBGckmsziT8R%2BPO%2Bcx7qyH6IbMbkYSoO1oA1Camm9VjpRix2blD1Hms26t53g%2BQ15M8TR%2BLwCqj6VvEsc2Mj6JyCLSdSei5p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fb2b788-AMS
content-encoding: br

GET steeruhat.com/_next/static/css/0bc0cde260d08b97.css

172.67.223.110

200 OK

1.8 kB

URL GET HTTP/3
steeruhat.com/_next/static/css/0bc0cde260d08b97.css
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
ASCII text, with very long lines (1841), with no line terminators
Size
1.8 kB (1841 bytes)
Hash
ff1d3d5d24ca0172d59b02e7505ddaa1
41e83ee08e21f369886b0fdad0ba01d8b20897b6
939b17f98d9d3585510edafa70c73c6619ea20d9b401b4396041272bed67ecf6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1843
etag: W/"66f6b10b-733"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kmT6aBZb4E99EnlDYHheS3cnZxjAUboJ9KWM0cOf%2Fh46UkbsDJ5%2Bbit%2B75MbmabWSB1ZgYfCdnpddXrQk%2Ff7g%2FqdpiwRWDmS%2F%2F%2FfqgQY8eaMrQlGmxyezwnuoS6ye%2BIZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1f96b788-AMS
content-encoding: br

GET steeruhat.com/_next/static/chunks/webpack-89c9b79f72ea3321.js

172.67.223.110

200 OK

7.3 kB

URL GET HTTP/3
steeruhat.com/_next/static/chunks/webpack-89c9b79f72ea3321.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
JavaScript source, ASCII text, with very long lines (7632), with no line terminators
Size
7.3 kB (7251 bytes)
Hash
acb899e9dd32ed22c0a3fc70f81dc6c2
87c2f16b2b230cff96bac413b960184d08a52fcf
4e194b2537f2abaf6ccaa7aaf5c98b4f565d308ea279401bad97e66210912be6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/webpack-89c9b79f72ea3321.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-1c53"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SUU9KS0%2BJaq%2BJK03qofL8cqv4E8B1HvuPVCXmTbAcoHYu3IRdslDwPpCJ0PQCHhYmH5yDf5ynk5P7ZUIZf0jQnfo5sXGhpDg6dQ53%2B%2B9Xt8hKVXCk5f9WMacY1DfQRzQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1f9bb788-AMS
content-encoding: br

GET steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_ssgManifest.js

172.67.223.110

200 OK

134 B

URL GET HTTP/3
steeruhat.com/_next/static/kqWXgqMucf9vuIzBc7908/_ssgManifest.js
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type
ASCII text, with no line terminators
Size
134 B (134 bytes)
Hash
8ffe0d99020b7535af6db34ba54a25cf
c9e0b6379bdae795228998c3050d295d14e65669
1f5fd7652f124b236dc9ef40458fe6fbbd3b09ef521cd3e4f22602450525773c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/kqWXgqMucf9vuIzBc7908/_ssgManifest.js HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 29 Sep 2024 16:40:33 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f6b10b-86"
last-modified: Fri, 27 Sep 2024 13:20:11 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FFgncPOcRz1Wm8kvrcai89bGzQPVgncdvSvyhTF3i8vaxdVgUHGOUha94%2F6TD%2F%2BBJ%2B5th6UKrgNjbgXD5N4j79Ij%2Fw4AcZtS5QqOGjeDg6w%2BsuurKh8%2BjAwIImYv72ho"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cad6a6a1fb7b788-AMS
content-encoding: br

GET steeruhat.com/favicon.ico

172.67.223.110

204 No Content

0 B

URL GET HTTP/3
steeruhat.com/favicon.ico
IP
172.67.223.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://steeruhat.com/
Certificate
IssuerGoogle Trust Services
Subjectsteeruhat.com
Fingerprint80:73:D7:CF:A2:1D:E0:1C:50:BD:9F:C8:FA:C8:82:CE:B6:AF:0C:C5
ValidityFri, 13 Sep 2024 07:13:46 GMT - Thu, 12 Dec 2024 07:13:45 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: steeruhat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
date: Sun, 29 Sep 2024 16:40:33 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWfWKKcOv2%2BCtsm26o20GBefnl0HFUXS0qCktQpnTUQcEAi6UqzE%2B8AFckHjGy%2F4ctBO0%2Fe3bpE97vOoStVIDcaX85MNLq5R6106UeFqgxwk84Httgo2H95vwrrLbsvE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cad6a6b3917b788-AMS

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by