{"report_id":"62bfb011-6960-4ff1-98d5-1f13b995797c","version":6,"status":"done","tags":[],"date":"2026-02-20T16:39:05Z","url":{"schema":"https","addr":"baycwallet.net/","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"baycwallet.net/","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"title":"Bayc Wallet","dom":{"size":12646,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11266)","md5":"37fc9f1b89b201e2feb361f51ac7358b","sha1":"93fb593c421ba7988c77dfea37bda79bf943b146","sha256":"eb8f4e3a481e28a319ec16e793ad36ee1c2570f121451380d391c98a3e78c11d","sha512":"7096bf8479fe207acdc9ab4c392a8efea247f4e4c8c83204ba6f20c39f90b9560a288f90b3c7cebd754721af775c7fa276917919f72ba3af0fa413624694faac","ssdeep":"192:aBTDXvsI5am1S64dPuCT7X/kFR+M8YiK2UYMk4bloqXdET8hL+vT7Pe/sP/SNUpG:gTTL5amB4xHnMF7xba+Sv2/AOUU","tlshash":"6a42c413218679665123d7dbe4013f9868ebf33ff19685502af818d82ed3cf8b1598b6","dom_hash":"domhashf68aa9879430259a124fad645638972a","first_seen":"2026-02-20T16:39:09.770126Z","last_seen":"2026-02-20T18:10:51.030524Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"baycwallet.net/","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T16:39:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T16:38:45Z","timestamp":1771605525,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53764,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-20T16:38:45.135641+0000\",\"flow_id\":972679332326278,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53764,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-20T16:38:45.093062+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"app.baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-16T08:54:54.873632Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.baycwallet.net","ip":{"addr":"138.124.89.57","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-20T16:39:06.308188Z","last_seen":"2026-02-20T16:39:06.308188Z","alert_count":2,"request_count":2,"received_data":762,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-02-18T13:39:54.749049Z","alert_count":0,"request_count":1,"received_data":2479,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":104306,"sent_data":1077,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":2,"received_data":12163,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"baycwallet.net","ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-20T16:39:06.305873Z","last_seen":"2026-02-20T16:39:06.305873Z","alert_count":11,"request_count":11,"received_data":3456573,"sent_data":4947,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"baycwallet.net/assets/index-Bgjmi_QS.js","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95f454cffc3c439614ca8d88f352b3e4","sha1":"fbab6d68210e0858097c3cffb3c56193b908a8d6","sha256":"4f9a80a91b38f2567e3de6ba02d5d7de7d9883fb31571f9e780fb8642fbef391","sha512":"62722213a6f644509a717d49cc589ef7f51ae8df828965be297dbff487fbd2149c2172118a4ff43a8c52f04df0c0a95fa7f59126269f637f6945bad86c2c95d3","ssdeep":"3072:koQbChoRjP1elB9F7tXrxv9T250XiiRXu63q3XcMp:qC+RjPMxdJHSiRXu63q3XcS","tlshash":"45c32be83282707253e619e1407b140af3796d69344c88d4b1acadeb3d7a89951bff7c","size":128595,"data":"","first_seen":"2026-02-20T16:39:09.778302Z","last_seen":"2026-02-20T18:10:51.039224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 18:20:45 GMT\r\nexpires: Tue, 16 Feb 2027 18:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339480\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T02:54:32.717581Z","times_seen":31725,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":161,"dns":10,"connect":9,"send":0,"wait":9,"receive":20,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Golos+Text:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:44.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Golos+Text:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 16:38:44 GMT\r\ndate: Fri, 20 Feb 2026 16:38:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"228432a495d8c423b9e11fa98d882f7c","sha1":"95d8dd9aa663579111bb40f98c88cb050880bcc3","sha256":"6b3fab7d0a0529ab23bfeed0784cd6d2e1c26136c98c4c9d2c7b58b3cf085b9d","sha512":"4bf203230ae8b45dc43b1d6be6f6d88e5830dc716b5792a463b6c01dc856c155d51b2f18d2b07251dae88f57ca51af744d136a505c3bc9a849e3a5c22cbb5c07","ssdeep":"96:vOEaJfOEagFZGOEa4Jc+usOEa1N8OxMaJfOxMagFZGOxMa4Jc+usOxMa1N8OpaJ/:4JoM8a1JSW8QWJB183XJUw82E","tlshash":"b0c1e291852b9e00eba31cc1a3ce7e73ae0e51093400c5758efd08a8ac9ec360395b5d","first_seen":"2026-02-12T21:01:59.184439Z","last_seen":"2026-06-04T23:20:57.214937Z","times_seen":16,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":97,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/index-Bgjmi_QS.js","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:44.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/index-Bgjmi_QS.js HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:44 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 20 Mar 2026 16:27:02 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 173502\r\ncf-cache-status: HIT\r\netag: W/\"6994813e-1f653\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euDL0EvEzNJ1Fve%2F%2BXwTw2XAiWsDWNUaftbBmIebRkBIi72%2FfShoZjTfKBXzyMW9Bi5Pv2KX49eOnGRE5F5Mqs8q5nONI40W4TshIqj%2F\"}]}\r\ncf-ray: 9d0f6fa229e0f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95f454cffc3c439614ca8d88f352b3e4","sha1":"fbab6d68210e0858097c3cffb3c56193b908a8d6","sha256":"4f9a80a91b38f2567e3de6ba02d5d7de7d9883fb31571f9e780fb8642fbef391","sha512":"62722213a6f644509a717d49cc589ef7f51ae8df828965be297dbff487fbd2149c2172118a4ff43a8c52f04df0c0a95fa7f59126269f637f6945bad86c2c95d3","ssdeep":"3072:koQbChoRjP1elB9F7tXrxv9T250XiiRXu63q3XcMp:qC+RjPMxdJHSiRXu63q3XcS","tlshash":"45c32be83282707253e619e1407b140af3796d69344c88d4b1acadeb3d7a89951bff7c","first_seen":"2026-02-20T16:39:09.778302Z","last_seen":"2026-02-20T18:10:51.039224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/index-DvqzQJXF.css","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:44.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/index-DvqzQJXF.css HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:44 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 20 Mar 2026 16:27:02 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 173502\r\ncf-cache-status: HIT\r\netag: W/\"6994813e-1fe7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvlZen5xJnBfsKoreBoPR0QHQoeREiCbrjyK%2FvWRvIJMxTSlN%2BKICWrnkAGxVxmDAGil2BlWO9UYZ8wk4qfbduNcyBEkA20%2Fv3mv%2FAj5\"}]}\r\ncf-ray: 9d0f6fa229e1f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8166)","md5":"b54ea34867294aa6a6f7193f858b7d62","sha1":"d33c05300896f6aaa580943c6a3dec7ad4a5a282","sha256":"277bee9bc35e2f37f5c0e9d58d02044cd50ecb268e95e198b1ad4b39ffe76f73","sha512":"945f3248e39f81536cb29d0625c4702ffdd546c729d6736d50828f0ab009c0746419cfe8acda78fab7a63f4b9c7cb589ca570ebf4ca8a91a25a33f195c1d7674","ssdeep":"96:p1NU/uvfrEMgfn2n9Gl2neqSWxAJGNB1vBBNNLk6MLS5nKzBcFgsCM:p1NUGoCGlieDWxIGNBdfY7exKdZRM","tlshash":"abf1ef23369c382cf437c5d2d4a126462199f333f2d641d999f5a5a9cdc70eb3660be4","first_seen":"2026-02-20T16:39:09.779393Z","last_seen":"2026-02-20T18:10:51.064833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:44.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 16:38:44 GMT\r\ndate: Fri, 20 Feb 2026 16:38:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-11T01:23:35.775492Z","times_seen":20669,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":60,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/wallet-BdJ4XGJF.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/wallet-BdJ4XGJF.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 40659\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-9ed3\"\r\nexpires: Thu, 19 Mar 2026 15:01:27 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 265037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8sSsaT52NLGR1Jw1AOlPcRrvL0rWpLl%2FJME5FVsSIyIotvqSPRkrD8Ow5UOZXg99CzDkMNoFiVtpeLY66iICx2khnj7lpcXFchdHhzV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa38a27f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"0146c2a81c5e587f26e056dd114abcf7","sha1":"b9ed894016c0b36259e435fe34ca00f8074bdeb4","sha256":"1cf8ed63884b73ac2e35315940d238f4334886b470787102f94953de3f690c4e","sha512":"b03f3a0f46ac476819967a4f4f81c64f50a09e97cad57f07c74f8149035a7b8c2024c206c71aa9d45b50e75dc35d372b29546072699d1ce6083e41b81787ddb7","ssdeep":"768:5FOzNrkvlnc8miqkolemXfAwgxnl0Z5vhyqdL+bCGBjibyxp6ZekJkT5NU:5Fghkva8Qk2emtgxi5vhPYbCGBfP+ei","tlshash":"ff03e08ca3c9e7c24f1a7a68971031696a45e7c700eed1d42e53c93cfdc05b929835bb","first_seen":"2026-02-20T16:39:09.7809Z","last_seen":"2026-02-20T18:10:51.041511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/referral-DWHlW2Nz.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/referral-DWHlW2Nz.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 30729\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-7809\"\r\nexpires: Thu, 19 Mar 2026 15:01:27 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 265037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ogjTW%2BsTNmrYBQa8WGYvbvsyId9e7QYyM4mpBKoh8Wod9UBxd7AeRsct4K6F6tm%2BYg9MKB5A9Y%2Fz0UshHXRn%2Fvy3yq%2BdQCzuhtYML0l0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa39a2af527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"aa353e9529a476f299c0ef646e51bb11","sha1":"ea581a6724fcf23792282fb45b13da4f4d19342b","sha256":"ed40aaa93794e5550881f3e97343a40b13e12e2620928d9d39748a532e088941","sha512":"f5edc103065abe639c8f52c275eb5a9b2e1aa9b949fea640b19b875a5023dc3d4213a57ff81b5b0c4137afdbbb8f07c07c93dcacd5e782bf0f966a9769c89ed9","ssdeep":"768:pJfx1I46oQ2Rp40IewS99HLowzzJvHs2vOz+uPkZD:DfLIMQ2Rp40PwS99Egy2v6+uPkZD","tlshash":"bed2f1323ab9c1fcbd0a755377596073c1ab0bd351949a10f4a6d3b8025f9db1c8e8e9","first_seen":"2026-02-20T16:39:09.78185Z","last_seen":"2026-02-20T18:10:51.056257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/ArmOnCard-CX0jA2-6.jpeg","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/ArmOnCard-CX0jA2-6.jpeg HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2812046\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-2ae88e\"\r\nexpires: Sat, 21 Mar 2026 01:53:22 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 139522\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voKYRlYWmBes51tTBYwjC8w%2BO0Dz%2F%2BiWMf1scRMVrr%2FtvqzkZByVP3BZSvZcnm3EKYrGTq0Kkfb%2B8ptL5X4TV0jsMz%2Butzks664OEyjk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa3ca33f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2812046,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 4004x2042, components 3","md5":"ceb1b4d29b40369b796658ec404eab02","sha1":"9e35e0016d94a8750b4cddedef8c55d7bc7de643","sha256":"f9975963dcc3d095ee55c9207da40d93b54fe70a44197f5d28346a788db1f463","sha512":"a36861eb9f3e7a8c45278a106a08b7357d377571032787a4678161aee03e1991f4933cfd13e0c65fe68611cf4616b97e2012737ab42533198acfc40cd2d6fee4","ssdeep":"24576:NddYPMo4Xq9gKxhzMPEE0Fyk2bo+KvPGv023iYJpiNm:NwMt+pzMPi12twPGvPyOAs","tlshash":"c9252375cb22cdc1df0a1466f27eadb72729671c08a4744e8bc8cc55d02a6b2d8716fe","first_seen":"2026-02-20T16:39:09.782684Z","last_seen":"2026-02-20T18:10:51.058858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T16:38:44.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:38:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGF4gp%2FT79xX%2FjY4gSxAop4xlgmv96tZg9u5pxpGLNF1uBu%2F2ZBudLp%2F7AD%2FKxoqwhwcGyzdiPJJivH2JGck7Z5XmKMHyVyQQXdODn7n\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d0f6f9eaa40c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":722,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"83462bb130a7f158f116a5162faa5b41","sha1":"11c9965e4942e3c76a390dd377e4471f17ccf815","sha256":"3b81b89c1317d4dfa9e8d75e3c66efa52a879361e8d87f6c5f9eee3a78a8ffd6","sha512":"d60f43f656c428bd0a90ef5922375beac4d63644179973ba6e462004367a6eb24e7b9c9bf6b2fc5c6a3f9bc49cf55a9c2f3a1aa2539dc83a2031d2dbd7a736eb","ssdeep":"","tlshash":"aa01f4926090c816132043916d82b929dd47d61b47489954b2f790fddb987c286df96c","first_seen":"2026-02-20T16:39:09.783582Z","last_seen":"2026-02-20T18:10:51.052272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":65,"dns":29,"connect":10,"send":0,"wait":337,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://baycwallet.net/\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d0f6fa4cfaf3017-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":168,"dns":21,"connect":21,"send":0,"wait":116,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 12:46:48 GMT\r\nexpires: Thu, 18 Feb 2027 12:46:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 186717\r\nlast-modified: Tue, 09 Sep 2025 18:38:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29672, version 1.0","md5":"39357dbe8984618163ca98d144638fea","sha1":"3c5f9d8066bd583aabd676a861172a5297ea6e4b","sha256":"327a37fa78452e54fe5ecfdb3039f611080c4629244198faff8384ad4fc5a48b","sha512":"24c0cab0a589f8bbcc59fed31a87dc1187371a7d46603f80b76b9d453e350a3e35cbe7fac080635961e90859837b42285b0776bd0492d16ca1fbf12e5b97f74a","ssdeep":"768:lBIIE2FXroI4UZRppjb9Y5mtKR6klfxuVyDfdLnAUbN4x8:lBieHjbW5xR6klfxuVyzd7FY8","tlshash":"d1d2e18c85685eeff70196dd18131437c91e3649f78def60c5842bcac1f936aa2a5c78","first_seen":"2025-09-12T02:44:04.646948Z","last_seen":"2026-08-10T23:35:04.429267Z","times_seen":2405,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":204,"dns":1,"connect":29,"send":0,"wait":17,"receive":2,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/BaycPhoLogo.jpg","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /BaycPhoLogo.jpg HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5245\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-147d\"\r\nexpires: Sun, 22 Mar 2026 05:08:43 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 41402\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taeXGuR2%2BVxfWaiG10GOsU5Rssay169OtsfmlPUwr9muc27xTIc6liIzgR%2BpGo0k9fpqN%2BWNFo7FZzoVg3GZ0U32sW7j9XUVIL4yXjy7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d0f6fa5cacbf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 191x179, components 3","md5":"232920097cc09a7ac423a6c6aff4563c","sha1":"22dba9fa64ca7036ebb206cae2038127a8c73f29","sha256":"2098378027154c932b67148bdb8f3418ba34cfa1e03e8e60a04fa0fa55ba67f9","sha512":"3d8c71f57fd70b3deaa12b4d4f09f577b3002264f6892e63284818bd2798bad064494d70690bae1349d7589e66cfc6fc4d48bef3d79440aa6882a2e2caa389a6","ssdeep":"96:G2E1NKIPVsE0WKWwNRm5fZ1KxqVryJ2UL+/twz1ATZi/aImLo92SBfMp:+DKIX07NRgx1lTUyFwz10fixk","tlshash":"05b16cd6b3a0dc17d676a9350cba8b102b671e0677a54a83026c34f04ff64f31e622e5","first_seen":"2026-02-20T16:39:09.785569Z","last_seen":"2026-02-20T18:10:51.036434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/support-BduM4C5N.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/support-BduM4C5N.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 34175\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-857f\"\r\nexpires: Sat, 21 Mar 2026 13:45:38 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 96786\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuGYr37oXiTZ6BOHLQuPhTu9CNe0I6mtTpD%2Bhbe1NgkdcPiyXB%2BTRC%2F3jidXikMJSjjDQ2xbWZH5KJ8Cgh7YE70eLtWbbTD8RearmQ59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa39a2bf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"e21448a9d2f7b0dcdc30c4798917bb0b","sha1":"14c71c25ba56c5f56f8cd170947aa34243c80008","sha256":"0e69fd866283288382b8ec7721874d0593eaa919e2b42938208b54e89bbede1d","sha512":"b0007da9f53dc7c9333c2ab9c4b4870f95c898ea113cd73f5e8aa9c027219440c9d81d521e9a78df8dca4c056381945861d2c66121b171f7ecac88b9e6673fad","ssdeep":"768:p4KwoJcm2VKWiaqe1y0Fd9qpPqThJtEizOBbZD9DdPv8VPHULPf/A0+:p4KLwiajd9kylJtEiKXfPUVPH4fx+","tlshash":"dbe2d035e50a8fbab463643bc44d2429e7fed3931ca7f2049b9f1123296f898c5b4621","first_seen":"2026-02-20T16:39:09.786496Z","last_seen":"2026-02-20T18:10:51.061846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.baycwallet.net/api/send-referal","fqdn":"app.baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"138.124.89.57","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.baycwallet.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 15:43:04 GMT","end":"Sun, 17 May 2026 15:43:03 GMT"},"fingerprint":{"sha1":"B2:91:79:6A:84:4C:7D:F1:35:93:F0:DB:B1:C0:97:F6:28:95:AF:89","sha256":"84:00:62:F9:B3:96:37:5E:31:B2:25:9A:80:43:7B:AA:A4:59:A2:6F:A8:02:D0:5E:59:55:F1:09:3F:27:0C:9C"}}},"request":{"raw":"OPTIONS /api/send-referal HTTP/1.1\r\nHost: app.baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://baycwallet.net/\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://baycwallet.net\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-11T02:54:32.688873Z","times_seen":362596,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":95,"dns":28,"connect":25,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"app.baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.baycwallet.net/api/send-referal","fqdn":"app.baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"138.124.89.57","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.baycwallet.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 15:43:04 GMT","end":"Sun, 17 May 2026 15:43:03 GMT"},"fingerprint":{"sha1":"B2:91:79:6A:84:4C:7D:F1:35:93:F0:DB:B1:C0:97:F6:28:95:AF:89","sha256":"84:00:62:F9:B3:96:37:5E:31:B2:25:9A:80:43:7B:AA:A4:59:A2:6F:A8:02:D0:5E:59:55:F1:09:3F:27:0C:9C"}}},"request":{"raw":"POST /api/send-referal HTTP/1.1\r\nHost: app.baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://baycwallet.net/\r\nContent-Type: application/json\r\nContent-Length: 219\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 75\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://baycwallet.net\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":75,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a10ea3723a433a3c6281969495a01ed6","sha1":"4bd27b15ea707c55bb26419839ba43f3463fe069","sha256":"7a1aa335cb7d9f87420a1dfc67dd7ab0a0211d7f382b26aa029187619126f790","sha512":"f60e48c750a02c784829185d27e8f1075406bb8fd5d99462cd2cf9a1ba14d9d89c052c9399661d356f0fc88117e678c871d465f7a97ed8f2ff578595e3fc35c8","ssdeep":"","tlshash":"3ca022c8ca080c380bc00c32308822f028cc2a8bb3bb02a2002e28080f08ba0023f30c","first_seen":"2026-02-20T16:39:09.78778Z","last_seen":"2026-02-20T18:10:51.049757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"app.baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/Logo-NKHV1LhM.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/Logo-NKHV1LhM.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 41601\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-a281\"\r\nexpires: Thu, 19 Mar 2026 15:01:27 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 265037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pW4LdVIFr6bpzbyXF1iiB4OzYR%2Bf6wtaY9w3psNn5BLQx3V3as2ux27baCeo%2BD6lxYYr3G0BVpdVKMD8NyAkH3qv1zI%2FKxXuWLigS1Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa38a26f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 792 x 180, 8-bit/color RGBA, non-interlaced","md5":"e830435902cea4f89162e9b9288a2e3b","sha1":"ceb3a7a252487af87990d0a71977e8f3befc1af8","sha256":"d44ce926947f909cebb01637013acdcb95e48bfaef746a27d133dbab958f7ce5","sha512":"64836f2370986c6fec4be63ef70d4e773b278e4372a7a6b6d493db3e3c44f5b4b190f90a9891a21945f31448183bc0bf676b43d2ca5219d69c1d0993f13fed15","ssdeep":"768:k5TfZqRqVftNB4KLKBOHJ9ufFp4fG1kExD7Q5AHvD+fJGvBrqVWqXA54BdajvsFY:kBBqRCf7EA+fyG1HE0oJG03NB20FR+","tlshash":"0513f1a18447e648d3ab81139fb647323a3096a570d394aea3f7586f4c039bd2df0ec1","first_seen":"2026-02-20T16:39:09.788479Z","last_seen":"2026-02-20T18:10:51.060393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/card_logo-D1SrwJ_9.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/card_logo-D1SrwJ_9.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 33046\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-8116\"\r\nexpires: Thu, 19 Mar 2026 15:01:27 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 265037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNU6nOrFl6gl%2FfYX0WckdEl9SSJfP7x0lSznowt54%2Fr2WINg9d9yeTPJ5nzT6uWzNFXBrP864HguiDbPdO1kgXctR2bf7RmMeNHVk%2BEl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa39a29f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"196a8f99c23379a8a0d90abd94a4cdd7","sha1":"d2981f855f1bd3ded1121474910fb1f45d8f357e","sha256":"05054e98ef5e60eae0582d34f46d23f2485eac825ade299a860d1dafb58a230d","sha512":"20cae44d2f8cabe0b7f60568730f1c69a810640ef7fb2568a8b6eac3504d7d351bcee0f137e6dba35d0dc75f454b311442064ab10154ca451735437298e7d37b","ssdeep":"384:L9KWxcdJ+F35FTJOO7soFXDwV4WerbzblKOZ73rg8Z8DjkqTUpnY6YqyYjyRLpKT:L9KW2uFv1ODoV/1K6ge8c0YjyRLYO+d","tlshash":"f3e2d0a4ccc3b6b2b9f6925c556762185f80bef2534a36a3b78cdc004be1f6456935d0","first_seen":"2026-02-20T16:39:09.78934Z","last_seen":"2026-02-20T18:10:51.043612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baycwallet.net/assets/phone_card-CPw0M4cb.png","fqdn":"baycwallet.net","domain":"baycwallet.net","tld":"net"},"ip":{"addr":"172.67.142.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baycwallet.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:04:50 GMT","end":"Sun, 17 May 2026 13:03:30 GMT"},"fingerprint":{"sha1":"62:30:3E:54:9E:FA:82:7F:A1:FE:F5:95:29:A8:E7:E3:EC:18:03:58","sha256":"8A:DE:D3:A3:5C:53:EC:30:3E:95:83:37:D4:13:49:50:3B:80:C8:66:62:91:D0:D5:92:B8:F2:4D:62:2C:9F:97"}}},"request":{"raw":"GET /assets/phone_card-CPw0M4cb.png HTTP/1.1\r\nHost: baycwallet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://baycwallet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 313747\r\nlast-modified: Tue, 17 Feb 2026 14:54:54 GMT\r\netag: \"6994813e-4c993\"\r\nexpires: Thu, 19 Mar 2026 15:01:27 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 265037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQKbUtYC6b7GRON1XYvpfv3yehej9jKUJFhxASjBK3NM7aYRxryE%2Fv8hTAz%2FH1TACmzQxOSco487vjw9ot6zr6bifMw0JrD%2BT%2B2yNepZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f6fa3aa30f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1244 x 886, 8-bit/color RGBA, non-interlaced","md5":"2f2a77bcfd269883eaa2a3df764d2cd0","sha1":"88a857a3e6cb2f0ba7eeaebb6495d89f105bc728","sha256":"6783d668ecd9da52f75e3957b0bc52820a75824525e2f5a80af04b903b537229","sha512":"9c9bed09dc6349a48eb7898426f2ac4934ba587fd097fad21cdf4aef2d0a6f3dd9ff55266e9817b5396b95a44827caf8a3864a1b5e58940947ebdd47194470ad","ssdeep":"6144:84W9pYmr8PtXYnnX9FP3203NDq9ELA0IJUCT0nRejryfPqySISCp:8gmrEqnXj203NrLA0IJUg0ReGxS8","tlshash":"4464238c0b1537f2cbdf017211a85e104afe7a665fea6e1af71c7cb6b6019780335689","first_seen":"2026-02-20T16:39:09.790327Z","last_seen":"2026-02-20T18:10:51.045733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"baycwallet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/91.90.42.154/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baycwallet.net/","date":"2026-02-20T16:38:45.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /91.90.42.154/json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://baycwallet.net/\r\nOrigin: https://baycwallet.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:38:45 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, OPTIONS, POST, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://baycwallet.net\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lThpIIire8CMux6uLpF4CWHjnsM9MsKJ%2FeBjvTUTgvWPpkbKM3ZO7%2BYnl9oyBa6YufTuVV7wec4Cip73jZ4luo6GFPkU%2FaI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d0f6fa609f286c4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e04f1469fffe997f86caaa7556ea45e3","sha1":"1d27c4b7717eb0815a21b1cc77b4ecfa46da686b","sha256":"de7561aa66cb3b68b9ca8c76e969396ca71f8b045e3dc76024fd96aae7cce322","sha512":"c2b87b634c6cded9140ef5ceb496f18359645a78fd5b19f9e1953d5f47d3d7a447c32b352720691f07853b90a0445fd1fe1d3cdad3e391e308b850bb0a7856a7","ssdeep":"","tlshash":"82012428e4680e7b88b80358b4686a07162422075f16354e7fd4874d0f8d8bf20b124e","first_seen":"2026-02-11T12:27:33.810968Z","last_seen":"2026-03-11T11:01:39.516772Z","times_seen":1299,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":220,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}