WEBSITE ANALYSIS REPORT

http://ww80.discord.cc

19 Oct 2026 · 04:29:51.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:29:21.790 GET 200 document 38.8 KB 639 ms 2 alerts

04:29:23.163 GET 200 script 144.3 KB 61 ms 1 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js

IP / ASN

13.249.8.120

AS16509 · AMAZON-02

Requested by: https://ww80.discord.cc/

Resource information

File type: data
MIME type: text/javascript; charset=utf-8
First seen (UTC): 18 Oct 2026 · 12:50:45.537 UTC
Last seen (UTC): 21 Oct 2026 · 19:49:54.902 UTC
Times seen: 255

Size: 144.3 KB (147741 bytes)
MD5: 1253e91864afe2b8b00bd4523921428b
SHA1: a4e22f3db8ea79303e34f8ea7f1f7e6fac04fbb8
SHA256: fa05ceac8cc7d359076decf72820518805fae7a8bd80a2f4e38aea1598268329

Certificate information

Issuer: Amazon · Amazon RSA 2048 M04
Subject: *.northwavepoint.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D
Valid from: Thu, 29 Jan 2026 00:00:00 GMT
Valid until: Sat, 27 Feb 2027 23:59:59 GMT

Technology fingerprints

Amazon Web Services (PaaS)
Caddy (Web servers)
Amazon CloudFront (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1
Host: euob.northwavepoint.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://ww80.discord.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
content-type: text/javascript; charset=utf-8
content-length: 55705
content-encoding: gzip
server: Caddy
date: Mon, 19 Oct 2026 00:49:50 GMT
cache-control: max-age=43200
expires: Mon, 19 Oct 2026 12:49:50 GMT
etag: "2411d-pOIvPbjqeTA+NPjqfx9+b6wE+7g"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7d287cb7ea5225b8d6559a32aee5ce72.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P3
x-amz-cf-id: 7mpAdoCzpLj9_3fphSjnuPnECZRI6Qi-3mPcScrhIg9oDcLpA42HFw==
age: 13173
X-Firefox-Spdy: h2

04:29:23.204 GET 204 fetch 0 B 209 ms 2 alerts

04:29:23.205 GET 204 fetch 0 B 106 ms 2 alerts

04:29:23.438 GET 200 img 0 B 105 ms 2 alerts

04:29:23.484 GET No response subdocument 0 B 0 ms 1 alerts

04:29:23.631 POST 200 xhr 4.9 KB 236 ms 1 alerts

04:29:23.898 GET 200 img 43 B 39 ms 1 alerts

04:29:24.921 POST 200 xhr 0 B 41 ms 1 alerts

04:29:26.898 POST 200 xhr 0 B 38 ms 1 alerts

04:29:28.910 POST 200 xhr 0 B 38 ms 1 alerts

04:29:33.926 POST 200 xhr 0 B 38 ms 1 alerts

04:29:38.936 POST 200 xhr 0 B 38 ms 1 alerts

http://ww80.discord.cc

Domain graph

Hostnames

Connections