WEBSITE ANALYSIS REPORT

http://bayrocktrade.com/

22 Oct 2026 · 23:00:27.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:59:56.117 GET 200 document 0 B 0 ms 5 alerts

22:59:57.047 GET 200 document 65.9 KB 343 ms —

22:59:57.659 GET 200 script 83.6 KB 28 ms —

22:59:57.663 GET 200 stylesheet 14.1 KB 9 ms —

22:59:57.670 GET 200 script 851 B 10 ms —

22:59:57.676 GET 200 imageset 1.8 KB 11 ms —

22:59:57.679 GET 200 imageset 976 B 9 ms —

22:59:57.681 GET 200 imageset 1.0 KB 9 ms —

22:59:57.682 GET 200 imageset 1.0 KB 10 ms —

22:59:57.684 GET 200 imageset 746 B 8 ms —

22:59:57.686 GET 200 imageset 956 B 11 ms —

22:59:57.689 GET 200 imageset 828 B 6 ms —

22:59:57.691 GET 200 imageset 112 B 7 ms —

22:59:57.692 GET 200 imageset 216 B 10 ms —

22:59:57.694 GET 200 imageset 160 B 6 ms —

22:59:57.695 GET 200 imageset 1.4 KB 7 ms —

22:59:57.696 GET 200 imageset 1.4 KB 24 ms —

22:59:57.698 GET 200 imageset 280 B 10 ms —

22:59:57.699 GET 200 imageset 364 B 9 ms —

22:59:57.809 GET 200 script 325.2 KB 91 ms —

22:59:57.840 GET 200 script 5.2 KB 10 ms —

22:59:57.842 GET 200 stylesheet 19.9 KB 259 ms —

22:59:57.842 GET 200 script 29.2 KB 42 ms —

22:59:58.023 GET 200 img 39.2 KB 8 ms —

22:59:58.025 GET 200 img 717 B 8 ms —

22:59:58.028 GET 200 script 1.2 KB 128 ms —

22:59:58.067 POST 200 fetch 15 B 91 ms —

22:59:58.166 GET 302 script 0 B 80 ms —

22:59:58.170 GET 302 script 0 B 80 ms —

22:59:58.252 GET 200 script 0 B 0 ms —

22:59:58.257 GET 200 script 0 B 153 ms —

22:59:58.356 GET 200 script 99.7 KB 21 ms —

22:59:58.368 GET 200 script 210.8 KB 13 ms —

22:59:58.517 GET 200 script 252.8 KB 24 ms —

23:00:00.807 POST 200 fetch 11 B 232 ms 1 alerts

Transaction #04

Request / response

URL

POST HTTPS

https://api.studlink-proof.pro/engagement/ping

IP / ASN

172.67.147.93

AS13335 · CLOUDFLARENET

Requested by: https://finsy8-recusandae79.cyou/?d=%2BEKv6PuFhGw3KwT29R7AHvOOrXPOXXQSdnb3VAr3BPjwrNE3kQn3l8dhWJrkbmBHW4cqGlSorX0mLiVmcnmr4j12bWyiBC%2BXZiipc2yLPclzfxhxqf7dJG5no61YVCKrhbLxdmLPTD2JqpEl4bhFoCwodGcxWa9uz0l%2FXKrOAjd9ykv2MaPmFMBDiR5eXFGLnz5okiRgoA84fyP0XN6JhWcB2tLTMYrFqh6HL39DY88Ux%2BtqOCjxZrhPEFwRRGXp&on=Bayrock

Resource information

File type: JSON text data
MIME type: application/json; charset=UTF-8
First seen (UTC): 05 Apr 2023 · 15:24:10.000 UTC
Last seen (UTC): 23 Oct 2026 · 10:25:46.814 UTC
Times seen: 26173

Size: 11 B (11 bytes)
MD5: 82380d1e263b6093f3c7535690fcdd75
SHA1: 022d91f218046ab2e61cac1eb13d6a718f75df2b
SHA256: 4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93

Certificate information

Issuer: Let's Encrypt · YE1
Subject: studlink-proof.pro
Protocol / cipher: TLSv1.2 · TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: DE:AA:50:54:30:5F:28:F8:31:DC:84:48:7E:69:27:2D:C2:8B:8B:22
Valid from: Wed, 23 Sep 2026 11:05:21 GMT
Valid until: Tue, 22 Dec 2026 11:05:20 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /engagement/ping HTTP/1.1
Host: api.studlink-proof.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: text/plain;charset=UTF-8
Referer: https://finsy8-recusandae79.cyou/
Content-Length: 57
Origin: https://finsy8-recusandae79.cyou
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4

Response headers

HTTP/2 200 
date: Thu, 22 Oct 2026 23:00:01 GMT
content-type: application/json; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ofSxQcceTfOxkZyOrAqZtgJdubqXiyQAPemLbIluTp6HgwiOqC4lFyDzaVe66RF7o6JYQJ%2BdCG0%2FyH2JxKTyompKeWkYf%2FJ1SEpZVKeH6skIRL%2Bxa9pj6z9wFYxrQksthDm6uoQqSzXH"}]}
cf-ray: a4ec1da12d4d35a6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Request body

Captured 57 B · Displayed 57 B

{"uuid":"af6b14b6-bc10-65","landing_type":1,"t":3,"s":62}

23:00:07.837 POST 200 fetch 11 B 118 ms 1 alerts

23:00:17.838 POST 200 fetch 11 B 114 ms 1 alerts

http://bayrocktrade.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bayrocktrade.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://bayrocktrade.com/

Domain graph

Network requests