WEBSITE ANALYSIS REPORT

http://086921.com

18 Oct 2026 · 20:42:43.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:42:13.789 GET 200 document 2.3 KB 290 ms —

20:42:14.866 GET 200 script 0 B 0 ms —

20:42:15.000 GET 200 document 38.8 KB 511 ms —

20:42:15.626 GET 200 script 144.3 KB 74 ms 1 alerts

Transaction #10

Request / response

URL

GET HTTPS

https://euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js

IP / ASN

13.249.8.22

AS16509 · AMAZON-02

Requested by: https://ww155.086921.com/

Resource information

File type: data
MIME type: text/javascript; charset=utf-8
First seen (UTC): 18 Oct 2026 · 12:50:45.537 UTC
Last seen (UTC): 22 Oct 2026 · 22:43:49.912 UTC
Times seen: 326

Size: 144.3 KB (147741 bytes)
MD5: 1253e91864afe2b8b00bd4523921428b
SHA1: a4e22f3db8ea79303e34f8ea7f1f7e6fac04fbb8
SHA256: fa05ceac8cc7d359076decf72820518805fae7a8bd80a2f4e38aea1598268329

Certificate information

Issuer: Amazon · Amazon RSA 2048 M04
Subject: *.northwavepoint.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D
Valid from: Thu, 29 Jan 2026 00:00:00 GMT
Valid until: Sat, 27 Feb 2027 23:59:59 GMT

Technology fingerprints

Amazon Web Services (PaaS)
Caddy (Web servers)
Amazon CloudFront (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1
Host: euob.northwavepoint.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://ww155.086921.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
content-type: text/javascript; charset=utf-8
content-length: 55705
cache-control: max-age=43200
content-encoding: gzip
date: Sun, 18 Oct 2026 12:49:50 GMT
etag: "2411d-pOIvPbjqeTA+NPjqfx9+b6wE+7g"
expires: Mon, 19 Oct 2026 00:49:50 GMT
server: Caddy
x-cache: Hit from cloudfront
via: 1.1 d27d3f4230954794eccdc551e04ec846.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P3
x-amz-cf-id: tZVg6cNWiVAPS4gcmh3-UPIDQpDFHU2dx8JmXsYmG3CnApJq4QnDrg==
age: 28345
X-Firefox-Spdy: h2

20:42:15.769 GET 204 fetch 0 B 204 ms —

20:42:15.779 GET 204 fetch 0 B 110 ms —

20:42:15.981 GET 200 img 0 B 109 ms —

20:42:16.004 GET No response subdocument 0 B 0 ms —

20:42:16.110 POST 200 xhr 4.8 KB 203 ms 1 alerts

20:42:16.339 GET 200 img 43 B 37 ms 1 alerts

20:42:17.335 POST 200 xhr 0 B 48 ms 1 alerts

20:42:19.344 POST 200 xhr 0 B 36 ms 1 alerts

20:42:21.371 POST 200 xhr 0 B 36 ms 1 alerts

20:42:26.396 POST 200 xhr 0 B 35 ms 1 alerts

20:42:31.448 POST 200 xhr 0 B 36 ms 1 alerts

http://086921.com

Domain graph

Hostnames

Connections