Report Overview
Visitedpublic
2026-02-14 00:18:01
Submit Tags
URL
cyrusfinance.biz/
Finishing URL
cyrusfinance.biz/
IP / ASN
3.33.249.164
Title
CyrusFinance
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cyrusfinance.biz 125 alert(s) on this Host | unknown | 2026-01-31 | 2026-02-13 | 2026-02-13 | 57 kB | 9.0 MB | 99.83.185.157 |     |
Next.js (JavaScript frameworks, Web frameworks)
Next.js is a React framework for developing single page Javascript applications.Node.js (Programming languages)
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.React (JavaScript frameworks)
React is an open-source JavaScript library for building user interfaces or UI components.Webpack (Miscellaneous)
Webpack is an open-source JavaScript module bundler.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | cyrusfinance.biz/_next/static/chunks/app/(cabinet)/layout-723a3045db2090eb.js | malware | Detects file containing Telegram Bot API |
| Hagezi Threat Feed | cyrusfinance.biz | malicious | Sinkholed |
Telegram Bot detected (1)
URL
cyrusfinance.biz/_next/static/chunks/app/(cabinet)/layout-723a3045db2090eb.js
IP / ASN
99.83.185.157
Token
8531569075:AAGnX5yQh-Y-514NTEUAVEoRq143QL5v4hY
Bot Overview
User ID8531569075
Usernamecyrus_deposits_bot
First NameCyrus Somos Estafadores
Last NameN/A
Chat Info
Chat ID-1003584163353
Chat Typesupergroup
TitleCyrus Finance Deposits
User Count3
Admins2
Pending Msgs1
JavaScript (38)
No JavaScripts
HTTP Transactions (123)
| URL | IP | Response | Size |
|---|