| GET diicotsec.ru:8080/animeNET/assets/css/sb-admin.min.css | 94.26.90.79 | 200 OK | 179 kB |
URL GET diicotsec.ru:8080/animeNET/assets/css/sb-admin.min.css IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeASCII text, with very long lines (65080) Size179 kB (178808 bytes) Hashcdc78bad7cf32ba39959a581c64beecc 3691e5c066c9a9d53bd2d650487d3d67bd8b288c 301e8bc080b428c614dfacbfa5ea26602c97a4a11c23777572d712cf0af890bb
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/css/sb-admin.min.css HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "2ba78-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25219
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET diicotsec.ru:8080/animeNET/assets/vendor/bootstrap/js/bootstrap.bundle.min.js | 94.26.90.79 | 200 OK | 84 kB |
URL GET diicotsec.ru:8080/animeNET/assets/vendor/bootstrap/js/bootstrap.bundle.min.js IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeJavaScript source, ASCII text, with very long lines (65299) Hash7f389f5d2622ce2090eca7c36bcb90bc ab27031159724e2421f6ff5c70f48e657abe9d39 8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "148b8-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21804
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET diicotsec.ru:8080/animeNET/login.php | 94.26.90.79 | 200 OK | 2.6 kB |
URL User Request GET diicotsec.ru:8080/animeNET/login.php IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
File typeHTML document, ASCII text Hash57f389b0187ed837f0cd9e0ad69259cb e3ac97279bc0318aa133267c87be76d6c64f1c0f 613cdfeab9326b93f84aefb41219d4c6d9171129a319917a9ac44aa34198367c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/login.php HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 866
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| GET diicotsec.ru:8080/animeNET/assets/css/custom.css | 94.26.90.79 | 200 OK | 1.1 kB |
URL GET diicotsec.ru:8080/animeNET/assets/css/custom.css IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
Hashf55023d442003b08b9b9740d6c6b875b af92c4b34970853cb407657fd5b58ec6818435fe 1f8208fe0eacb3849dfd8cf07c5871b6f20c6a9a5784bf8446e877e4e4c9dd20
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/css/custom.css HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "44e-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 398
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET diicotsec.ru:8080/animeNET/assets/vendor/fontawesome-free/js/all.min.js | 94.26.90.79 | 200 OK | 1.2 MB |
URL GET diicotsec.ru:8080/animeNET/assets/vendor/fontawesome-free/js/all.min.js IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeJavaScript source, ASCII text, with very long lines (65350) Size1.2 MB (1172040 bytes) Hash1011064a70f679eaaef8d6988d6cc493 5198abb91179ff6171ec60e54366138a06e7068f 2b36622b2d03598b27c0c17e5f50ef427810dbf17117b305dc57fbd97729b8fb
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/vendor/fontawesome-free/js/all.min.js HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "11e248-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
|
|
| GET diicotsec.ru:8080/animeNET/assets/vendor/jquery/jquery.min.js | 94.26.90.79 | 200 OK | 90 kB |
URL GET diicotsec.ru:8080/animeNET/assets/vendor/jquery/jquery.min.js IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/vendor/jquery/jquery.min.js HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "15d84-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30910
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET diicotsec.ru:8080/animeNET/assets/vendor/jquery-easing/jquery.easing.min.js | 94.26.90.79 | 200 OK | 2.5 kB |
URL GET diicotsec.ru:8080/animeNET/assets/vendor/jquery-easing/jquery.easing.min.js IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeJavaScript source, ASCII text, with very long lines (2532), with no line terminators Hashe2d41e5c8fed838d9014fea53d45ce75 bde98133f735398b27339c423a817e755329f7d1 1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/vendor/jquery-easing/jquery.easing.min.js HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "9e4-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 817
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET diicotsec.ru:8080/animeNET/assets/js/sb-admin.min.js | 94.26.90.79 | 200 OK | 1.2 kB |
URL GET diicotsec.ru:8080/animeNET/assets/js/sb-admin.min.js IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeJavaScript source, ASCII text Hashd30e845478b9c01cf684764b1e0a0117 343fcbb3d0996c74f2aedb55f328ea9c75c4b69b d9791c22547be892d54da8d7be533863693de3af7b32ee0c4cd2ed95a8aaa944
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/js/sb-admin.min.js HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "4b2-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 595
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET diicotsec.ru:8080/animeNET/favico.png | 94.26.90.79 | 200 OK | 8.7 kB |
URL GET diicotsec.ru:8080/animeNET/favico.png IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hashc6be885d6740f4065641ffb549ec00b5 436e83d91aa96525385f30c223cee036400f5c7c 860f56f8f95bfc98fbbe2be4e5b5b0374fcc62ad08530fc5064b2d96379c97e2
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/favico.png HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:43 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "2217-5b65c3ff7bc80"
Accept-Ranges: bytes
Content-Length: 8727
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| GET diicotsec.ru:8080/animeNET/assets/vendor/fontawesome-free/css/all.min.css | 94.26.90.79 | 200 OK | 59 kB |
URL GET diicotsec.ru:8080/animeNET/assets/vendor/fontawesome-free/css/all.min.css IP 94.26.90.79:8080
ASN#48452 Traffic Broadband Communications Ltd.
Requested byhttp://diicotsec.ru:8080/animeNET/login.php
File typeASCII text, with very long lines (58392) Hash76cb46c10b6c0293433b371bae2414b2 0038dc97c79451578b7bd48af60ba62282b4082b 876d023d9d10c97941b80c3b03e2a5b94631ff7a4af9cee5604a6a2d39718d84
Analyzer | Verdict | Alert | urlquery | malware | Malware - Botnet panel | Quad9 DNS | malicious | Sinkholed |
GET /animeNET/assets/vendor/fontawesome-free/css/all.min.css HTTP/1.1
Host: diicotsec.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://diicotsec.ru:8080/animeNET/login.php
Cookie: PHPSESSID=48g0igmmkd2f9777ba2k3pge5b
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 May 2025 01:15:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 13 Dec 2020 17:56:50 GMT
ETag: "e4d2-5b65c3ff7bc80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12674
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|