WEBSITE ANALYSIS REPORT

http://billeratrade.com/

23 Oct 2026 · 06:02:01.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:01:14.430 GET 200 document 0 B 0 ms 5 alerts

06:01:15.453 GET 200 document 65.9 KB 362 ms —

06:01:16.065 GET 200 script 83.6 KB 30 ms —

06:01:16.068 GET 200 stylesheet 14.1 KB 125 ms —

06:01:16.074 GET 200 script 851 B 216 ms —

06:01:16.077 GET 200 imageset 1.8 KB 210 ms —

06:01:16.079 GET 200 imageset 976 B 217 ms —

06:01:16.081 GET 200 imageset 1.0 KB 213 ms —

06:01:16.082 GET 200 imageset 1.0 KB 210 ms —

06:01:16.084 GET 200 imageset 746 B 221 ms —

06:01:16.085 GET 200 imageset 956 B 214 ms —

06:01:16.087 GET 200 imageset 828 B 216 ms —

06:01:16.088 GET 200 imageset 112 B 230 ms —

06:01:16.089 GET 200 imageset 216 B 224 ms —

06:01:16.090 GET 200 imageset 160 B 202 ms —

06:01:16.091 GET 200 imageset 1.4 KB 124 ms —

06:01:16.092 GET 200 imageset 1.4 KB 221 ms —

06:01:16.093 GET 200 imageset 280 B 201 ms —

06:01:16.095 GET 200 imageset 364 B 221 ms —

06:01:16.330 GET 200 script 325.2 KB 51 ms —

06:01:16.334 GET 200 script 5.2 KB 117 ms —

06:01:16.337 GET 200 script 29.2 KB 39 ms —

06:01:16.340 GET 200 stylesheet 19.9 KB 259 ms —

06:01:16.531 GET 200 script 1.2 KB 96 ms —

06:01:16.589 POST 200 fetch 15 B 132 ms —

06:01:16.634 GET 200 img 39.2 KB 305 ms —

06:01:16.636 GET 200 img 717 B 219 ms —

06:01:16.639 GET 302 script 0 B 140 ms —

06:01:16.642 GET 302 script 0 B 137 ms —

06:01:16.786 GET 200 script 0 B 141 ms —

06:01:16.788 GET 200 script 0 B 0 ms —

06:01:16.901 GET 200 script 99.7 KB 174 ms —

06:01:16.929 GET 200 script 210.8 KB 161 ms —

06:01:17.243 GET 200 script 252.8 KB 17 ms —

06:01:19.322 POST 200 fetch 11 B 247 ms 1 alerts

06:01:26.313 POST 200 fetch 11 B 125 ms 1 alerts

Transaction #07

Request / response

URL

POST HTTPS

https://api.studlink-proof.pro/engagement/ping

IP / ASN

172.67.147.93

AS13335 · CLOUDFLARENET

Requested by: https://finsy8-non61.cyou/?d=KUCdbtxNbqxEY1NM6s7GuaUVpH%2BFOEuBvzZRq3rhV1QPB3JzZTxZOlU1wu9ex4btObc6IecKmesznucEacwGDtjtZgvdbxugrEKYEW%2FHx%2BkZZSsSW0QT84nc0P29wF7ZmtwwoXlA4fjQyT4iZTfLfugfxkwUMRw0Fqt%2BEJ40VS2dgHV47JqN7wzY2nP2AYTaIZ53tsL3hjyDjbg2Rk1clMKwdn1rf8137qigqCTZY2adLeR5zzRWlxyMOTM4h29S&on=Billera

Resource information

File type: JSON text data
MIME type: application/json; charset=UTF-8
First seen (UTC): 05 Apr 2023 · 15:24:10.000 UTC
Last seen (UTC): 23 Oct 2026 · 21:23:28.255 UTC
Times seen: 26341

Size: 11 B (11 bytes)
MD5: 82380d1e263b6093f3c7535690fcdd75
SHA1: 022d91f218046ab2e61cac1eb13d6a718f75df2b
SHA256: 4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93

Certificate information

Issuer: Let's Encrypt · YE1
Subject: studlink-proof.pro
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: DE:AA:50:54:30:5F:28:F8:31:DC:84:48:7E:69:27:2D:C2:8B:8B:22
Valid from: Wed, 23 Sep 2026 11:05:21 GMT
Valid until: Tue, 22 Dec 2026 11:05:20 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /engagement/ping HTTP/1.1
Host: api.studlink-proof.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: text/plain;charset=UTF-8
Referer: https://finsy8-non61.cyou/
Content-Length: 58
Origin: https://finsy8-non61.cyou
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 23 Oct 2026 06:01:26 GMT
content-type: application/json; charset=UTF-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=A0mnwmwyEas3NYZlTARbYUqaE3Fg5QpqNMtuCX8YISczLUuMlV9794mkwD01n4a%2FSegq%2FIzivuBdXxKP8lCUqtC2utbm867dWI84ZKErWNLDnoyjCn41AehJ%2BfGWXJuEhJ2uM45vuHaT"}]}
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4ee86f37eea35a6-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

Request body

Captured 58 B · Displayed 58 B

{"uuid":"b5a05785-bc7f-98","landing_type":1,"t":10,"s":62}

06:01:36.312 POST 200 fetch 11 B 119 ms 1 alerts

http://billeratrade.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://billeratrade.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://billeratrade.com/

Domain graph

Network requests