{"report_id":"e10e42fe-dfaf-4172-9ca5-5afd42af5061","version":0,"status":"done","tags":[],"date":"2026-10-08T15:46:47Z","url":{"schema":"http","addr":"satellite.exchange/","fqdn":"satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"103.224.182.211","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"title":"satellite.exchange","dom":{"size":821,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e985446f998ccb70b515cee288e5f4c6","sha1":"95b4f58309d727ef22e4e5c4b475ec31dc57ce31","sha256":"fcb3a3cda541d38bef30c48cd2ee1196a2675ad03c2f1a8d03dfad6545fc7c8b","sha512":"489d2729fb3ca961f5d422a5b5f48791afbd249a80117b5279a9083fde09a4627114444c0f78f8e8356d33e3f80515f5e7d9d4c28095aef3cea689b13a8a2460","ssdeep":"","tlshash":"4e01bd459062980f34524bf6dccab86cc8969c0fc41d2cc0ba16519a8fdafaa897375d","dom_hash":"domhash6c21f228e1268722dc16d1665aa7dc24","first_seen":"2026-05-25T18:54:17.20082Z","last_seen":"2026-10-08T20:05:29.850681Z","times_seen":19483,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"satellite.exchange/","fqdn":"satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"103.224.182.211","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T15:46:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ww38.satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"yfdpco5.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"ww38.satellite.exchange","ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-08T15:46:48.289424Z","last_seen":"2026-10-08T15:46:48.289424Z","alert_count":4,"request_count":4,"received_data":40790,"sent_data":2832,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"obseu.northwavepoint.com","ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.210986Z","last_seen":"2026-10-06T15:11:55.510083Z","alert_count":8,"request_count":8,"received_data":7787,"sent_data":6998,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yfdpco5.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2026-06-06T10:05:34.567086Z","last_seen":"2026-10-01T12:51:07.333007Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":810,"comment":"","tags":null,"fingerprints":null},{"fqdn":"satellite.exchange","ip":{"addr":"103.224.182.211","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":197,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"euob.northwavepoint.com","ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.216693Z","last_seen":"2026-10-06T15:11:55.804466Z","alert_count":1,"request_count":1,"received_data":142037,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ww38.satellite.exchange/9101f118-0ea1-4526-b9ab-9dc03a074d59","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"b6a5d5bda0a9682ff49bd9e32eeb489b","sha1":"39ac1d527758dafeca224305a216ff1a1014d379","sha256":"a502e106e108c3a291f2be609f7cb5c7fa2c768a39cf66ac981f6e25ae951490","sha512":"82178e54250742d42e22982d80d27910773d71fe5da114f8fac00be0c798f651648501d0179f4bbaf33ab5b19d6109c4a09ceb88b516f923e573319dc559bc1b","ssdeep":"","tlshash":"78017008f53c1b94439b191735cff508f03b4a047d8ba0b844aa84c84eb5dd754237f9","size":779,"data":"","first_seen":"2026-10-08T15:46:52.992613Z","last_seen":"2026-10-08T15:46:52.992613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdb38148e50387179b98c18b2b2fb671","sha1":"e271f547dcfcda9405f21e68d42057012b66fb44","sha256":"8527ed00a982e2a3e2330f90460a18912584af817a5adec956935fe48be1c372","sha512":"9cd0a2b8b78a4b2c5138567151f23a9851ea1396ffe13e4b1efae57dfc64b385e97d32273052087e40cba3a4658ca6bc1fe6e5deb91fc62137a57497e4710bde","ssdeep":"384:sYmKQ/PaugCFUrAEQAPRFx5FdtcnStkcsILArox3ZkymESX99RVlFPvRfJ9DpQ66:sYgEnFdtnAMx3Z7JSX99RVlFPvRfjDpw","tlshash":"20a2a57572ba29b983de001f71bed750f2b8567099190424e0eced1d3624e5197b3fb8","size":21615,"data":"","first_seen":"2026-10-08T15:42:23.471802Z","last_seen":"2026-10-08T16:09:01.571527Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bda5ec6c751ff6f44386a0cd8cd0587","sha1":"8a9370f6c1926b552b1cc9d57ad8ec196fcc7641","sha256":"593bbf19646928b96ba6b4182f5274732511aaa0c3c1500b54daf49252515957","sha512":"a04e4d06072d631a84b6e236ca1e0954a4bfba4b70e0316212bf393ac66669ab1625cb91c5b9323d61240baab04f28d368a4e06ec64ab1fcf701aa1113b33a7b","ssdeep":"1536:bE78CWmr0XA6QOZEKNrm8ux8OgCMGxwdwcaYt7alywnSGVjne0XzLonh0RKXPV0G:Q7Vr0wSNWxYCMLdwktGVYXYbOpbZ","tlshash":"3ad3c69db2e27035039334a5057f450ae27b1e553c4b8290d1bae9d4ac7ce8e857bfac","size":141515,"data":"","first_seen":"2026-10-04T15:34:53.26207Z","last_seen":"2026-10-08T19:49:12.750918Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-10-08T19:38:13.933502Z","times_seen":438055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T19:38:13.935349Z","times_seen":403624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T19:38:13.934174Z","times_seen":403670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T19:38:13.934761Z","times_seen":403680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ww38.satellite.exchange/71abd554-5841-412c-9eb5-ed62a54bb8b4/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.pB2uqZ355ntFVdNkjVEp7BvwUcUl-FRtsB_y9_AaQKy51fGTgQgHTw.pmoBr9xjdm3EoTGSbj_96A.eyJ0b2tlbiI6IjY3NGNjZmRlYjMzYzY5MTlmNGYwYTMxM2RmNmZlYWNkOGViMjMyNTciLCJ0IjoiNmFjN2JhYzMiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiLCJvc19wbGF0Zm9ybV9taXNtYXRjaCIsIm9zX2ZvbnRfbWlzbWF0Y2giXX0.Dm5l6mKRkYFDLMUIRWOfzA","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.261Z","timestamp":1791474372261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.satellite.exchange","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 09:14:12 GMT","end":"Tue, 05 Jan 2027 09:14:11 GMT"},"fingerprint":{"sha1":"7A:9F:0F:EF:7C:28:3F:D9:41:04:27:92:4C:04:FB:5E:6F:62:29:58","sha256":"AF:1B:55:E9:49:24:CD:CA:2B:BE:E2:31:7E:DA:AA:EE:08:99:0B:B0:7E:D7:DE:2B:15:95:93:EA:19:01:8F:63"}}},"request":{"raw":"GET /71abd554-5841-412c-9eb5-ed62a54bb8b4/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.pB2uqZ355ntFVdNkjVEp7BvwUcUl-FRtsB_y9_AaQKy51fGTgQgHTw.pmoBr9xjdm3EoTGSbj_96A.eyJ0b2tlbiI6IjY3NGNjZmRlYjMzYzY5MTlmNGYwYTMxM2RmNmZlYWNkOGViMjMyNTciLCJ0IjoiNmFjN2JhYzMiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiLCJvc19wbGF0Zm9ybV9taXNtYXRjaCIsIm9zX2ZvbnRfbWlzbWF0Y2giXX0.Dm5l6mKRkYFDLMUIRWOfzA HTTP/1.1\r\nHost: ww38.satellite.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.satellite.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Thu, 08 Oct 2026 15:46:12 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":243,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ww38.satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:13.758Z","timestamp":1791474373758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3022\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":3022,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=f3dza3sMa3x8JnxrfHxrfA0gOyIia3wNf3d5a3wNe394e2t8DX1%2FdntrfA19fHZ7a3wNfX97fWt8DX18dntrfA19f3p4a3wNfmt8DXprfA19fXp9a3wNfX16fWt7Cmh9f3NreQxrfHw5a3x8a30PfX5%2Ba3wNa3x8Jmt8fGt9D3h5a3wNa3x8LBFrfHxrfQ97a3kKaH96f3NreQxrfHw9a3x8a30Pf2t8DWt8fCwRa3x8a30Pfmt5Cmh%2Fe3dza3kMa3x8K35rfHxrfQ9rfHw4YCkrOgwvOjorPDdrfH4nPWt8fiAhOmt8fi9rfH4oOyAtOichIGt8fGt8DWt8fCwRa3x8a30Pfmt5Cmh9fHhza3sMa3kMa3x8LGt8fGt9D3hrfA1rfHw9a3x8a30Pa3x8f2t8fGt5Cmt8DWt5DGt8fCxrfHxrfQ97a3wNa3x8PWt8fGt9D2t8fH9rfHxreQprewpoe3x%2Bc2t5DGt8fD5rfHxrfQ9rfHwCJyA7Nmt8fjZ2eBF4emt8fGt8DWt8fCJrfHxrfQ9rewxrfHwrIGMbHWt8fGt8DWt8fCsga3x8a3sKa3wNa3x8Ji1rfHxrfQ92a3wNa3x8OSk4a3x8a30Pa3x8Ays9L2t8fGt8DWt8fDkpPGt8fGt9D2t8fCIiOCM%2BJz4ra3wNa3x%2BITxrfH49JyMnIi88a3x8a3wNa3x8LBFrfHxrfQ9%2FeXhreQpodnl6c2t5DGt8fD1rfHxrfQ99a3wNa3x8Ozg%2BL2t8fGt9D35rfA1rfHwsEWt8fGt9D39reQo%3D\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=1\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=1029\u0026mo=0\u0026pn=4382\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:13 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3934,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:22.776Z","timestamp":1791474382776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2221\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":2221,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=10057\u0026mo=0\u0026pn=13411\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:22 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3133,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:42.803Z","timestamp":1791474402803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2221\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":2221,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=\u0026cp=30\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=30084\u0026mo=0\u0026pn=33437\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3133,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/favicon.ico","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.398Z","timestamp":1791474372398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.satellite.exchange","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 09:14:12 GMT","end":"Tue, 05 Jan 2027 09:14:11 GMT"},"fingerprint":{"sha1":"7A:9F:0F:EF:7C:28:3F:D9:41:04:27:92:4C:04:FB:5E:6F:62:29:58","sha256":"AF:1B:55:E9:49:24:CD:CA:2B:BE:E2:31:7E:DA:AA:EE:08:99:0B:B0:7E:D7:DE:2B:15:95:93:EA:19:01:8F:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.satellite.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Thu, 08 Oct 2026 15:46:12 GMT\r\netag: \"dfu820j7awxu0\"\r\nlast-modified: Wed, 21 Jan 2026 11:14:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":309,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ww38.satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:17.752Z","timestamp":1791474377752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2218\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":2218,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=5035\u0026mo=0\u0026pn=8387\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:17 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3130,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:27.782Z","timestamp":1791474387782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2221\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":2221,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=15064\u0026mo=0\u0026pn=18416\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:27 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3133,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T15:46:10.629Z","timestamp":1791474370629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.satellite.exchange","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 09:14:12 GMT","end":"Tue, 05 Jan 2027 09:14:11 GMT"},"fingerprint":{"sha1":"7A:9F:0F:EF:7C:28:3F:D9:41:04:27:92:4C:04:FB:5E:6F:62:29:58","sha256":"AF:1B:55:E9:49:24:CD:CA:2B:BE:E2:31:7E:DA:AA:EE:08:99:0B:B0:7E:D7:DE:2B:15:95:93:EA:19:01:8F:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww38.satellite.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 08 Oct 2026 15:46:11 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":39926,"size_decoded":40102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16142)","md5":"e4014b96828e554fc213eb746c257da9","sha1":"f719a5c091c5f9a1002b20598192a82ec8a747c6","sha256":"49d5fd136bf39a71d85f17c6038670f328652ffdac8ceb5c74f4c71cce03a38a","sha512":"5cf4a26b968cd1d3980cfdda7bbdf70e1f13d9cea1919f3ce3f42cf250b6efc946663ed3733e44d38a06c5bb8953f0254e9987c163a9333f56418659009e6f12","ssdeep":"768:Bt5/ko5XssDcP399hYgEnFdtnAMx3Z7JSX99RVlFPvRfjDpQ6Y:Bz/cfrh5pMx3Z7JSX99RVlFPvRfjDphY","tlshash":"3d033b3172f1257d925b412f32fea75cb178a660d94e4864e0fcd81c7a85ba20772fb8","first_seen":"2026-10-08T15:46:52.98318Z","last_seen":"2026-10-08T15:46:52.98318Z","times_seen":1,"resource_available":true,"data":null}},"time_used":954,"timings":{"blocked":0,"dns":530,"connect":100,"send":0,"wait":115,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ww38.satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=satellite.exchange\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.satellite.exchange%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco5.com","domain":"yfdpco5.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.464Z","timestamp":1791474372464,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=satellite.exchange\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.satellite.exchange%2F\u0026al=en-US%2Cen%3Bq%3D0.9 HTTP/1.1\r\nHost: yfdpco5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"yfdpco5.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/ct","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.510Z","timestamp":1791474372510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4518\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4518,"data":"id=92098\u0026url=https%3A%2F%2Fww38.satellite.exchange%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20iFrame\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1791474372506\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=9471927210020221051920188690915168900771961290770058521120897217229956029580214215011182272117588\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=Qh4O7Nxqwr\u0026pto=3144\u0026ver=66\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1791474372.p0zO9fPRvvxNEr0X\u0026suid=1.1791474372.mFqsWYQf1UzGYNb0\u0026tuid=1.1791474372.HVF1jLIm7b7Plyae\u0026sid=1.1791474372508.byR8eqZg9ouwIqL8\u0026fbc=-\u0026gtm=-\u0026it=6%2C2605%2C334\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:12 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681; Max-Age=29030400; Path=/; Expires=Thu, 09 Sep 2027 15:46:12 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://ww38.satellite.exchange\r\ncontent-length: 2180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681","quoted":false,"path":"/","expires":"2027-09-09T15:46:12Z","raw_expires":"Thu, 09 Sep 2027 15:46:12 GMT","max_age":29030400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681; Max-Age=29030400; Path=/; Expires=Thu, 09 Sep 2027 15:46:12 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5165,"size_decoded":2810,"mime_type":"application/json","magic":"JSON text data","md5":"26b5833a56a19866a25e56d683dd8326","sha1":"9d86b48f33b812e4fa481ae6bbd24e4544312e2b","sha256":"6bb4fafd5a3b7602fefc1cb482b653d60564518d6de07b2917a772ed21d04cf9","sha512":"95a7ee25dcd856473cc0f5572b991dafba6fe0c93f01f9d722a19e02f33fc6721c5e303a247f7cd840951d63830edf3ca866ef08cd27a88924cf04493affa2af","ssdeep":"96:9/i6Q+3KbfTU8wapKrvH/ibQ+3KbfTU8wapKrviIm1njLBzoi8Fsn:9/h6bfYEgvH/Y6bfYEgviIsByw","tlshash":"6cb12c774f445b25fb7f692a971d24c54262c6330887344fc1fa5aeb64e3745eb13444","first_seen":"2026-10-08T15:46:52.986418Z","last_seen":"2026-10-08T15:46:52.986418Z","times_seen":1,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":58,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/tracker/tc_imp.gif?e=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\u0026cri=Qh4O7Nxqwr\u0026ts=214\u0026cb=1791474372720","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.722Z","timestamp":1791474372722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=Qh4O7Nxqwr\u0026ts=214\u0026cb=1791474372720 HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Thu, 08 Oct 2026 15:46:12 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":270,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-08T19:40:18.233288Z","times_seen":421300,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"54.74.229.142","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:15.752Z","timestamp":1791474375752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:3D:8B:20:B4:A8:8C:60:11:E2:1D:A4:08:80:0E:B3:7A:B3:70:06","sha256":"A6:3E:4B:C3:79:14:D9:15:10:1E:21:3C:8E:50:F6:87:3C:BB:4A:B3:8D:1C:15:EA:E0:94:EA:AD:CD:B6:CF:FC"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2218\r\nOrigin: https://ww38.satellite.exchange\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nCookie: cg_uuid=3bdeb00f841a7cf8ad0b6874f66ee681\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"3bdeb00f841a7cf8ad0b6874f66ee681"}],"method":"POST","post_data":{"size":2218,"data":"e=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\u0026cri=Qh4O7Nxqwr\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=674ccfdeb33c6919f4f0a313df6feacd8eb23257\u0026tb=1%7C7%2C34\u0026gi=17%2C3387\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=34\u0026ti=3033\u0026mo=0\u0026pn=6385\u0026spn=3353\u0026sck=-\u0026fp=2723\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.satellite.exchange\r\ncontent-type: application/json\r\ndate: Thu, 08 Oct 2026 15:46:15 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3130,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"satellite.exchange/","fqdn":"satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"103.224.182.211","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T15:46:09.392Z","timestamp":1791474369392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"falcoonline.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 21:07:18 GMT","end":"Tue, 22 Dec 2026 21:07:17 GMT"},"fingerprint":{"sha1":"53:5D:9D:4F:3D:80:41:76:52:5B:D9:46:23:D9:51:C3:4E:FC:44:73","sha256":"39:7F:82:2D:88:A9:10:04:46:C0:0F:9C:6E:9C:BC:7C:45:37:F7:4D:44:9F:44:B2:78:E5:FC:44:17:C8:37:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: satellite.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Thu, 08 Oct 2026 15:46:10 GMT\r\nserver: Apache\r\nlocation: https://ww38.satellite.exchange/\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":563,"connect":156,"send":0,"wait":182,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.242Z","timestamp":1791474372242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D","sha256":"32:3C:54:8F:1C:33:6B:BE:0F:39:18:D6:DB:E7:61:78:95:9A:27:61:E7:33:FF:DA:F0:5E:F5:B4:82:D5:5E:A7"}}},"request":{"raw":"GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1\r\nHost: euob.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.satellite.exchange/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 53154\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ncache-control: max-age=43200\r\ndate: Thu, 08 Oct 2026 15:33:31 GMT\r\nexpires: Fri, 09 Oct 2026 03:33:31 GMT\r\netag: \"228cb-ipNw9sGSa1UrHMnVetjsGW/MdkE\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c683b079c7e660e9b6ed70f15b96641e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: QOvhN8tm091-v7CzzxqUeAn5l3m6XCesfr9CMR2DXFbWU99Nem9VKg==\r\nage: 761\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":141515,"size_decoded":53676,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"2bda5ec6c751ff6f44386a0cd8cd0587","sha1":"8a9370f6c1926b552b1cc9d57ad8ec196fcc7641","sha256":"593bbf19646928b96ba6b4182f5274732511aaa0c3c1500b54daf49252515957","sha512":"a04e4d06072d631a84b6e236ca1e0954a4bfba4b70e0316212bf393ac66669ab1625cb91c5b9323d61240baab04f28d368a4e06ec64ab1fcf701aa1113b33a7b","ssdeep":"1536:bE78CWmr0XA6QOZEKNrm8ux8OgCMGxwdwcaYt7alywnSGVjne0XzLonh0RKXPV0G:Q7Vr0wSNWxYCMLdwktGVYXYbOpbZ","tlshash":"3ad3c69db2e27035039334a5057f450ae27b1e553c4b8290d1bae9d4ac7ce8e857bfac","first_seen":"2026-10-04T15:34:53.26207Z","last_seen":"2026-10-08T19:49:12.750918Z","times_seen":619,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":14,"connect":8,"send":0,"wait":10,"receive":8,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.satellite.exchange/6776b92c-3888-4afd-8a72-89cd1d9ef786/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.wBr5lxvKFJd_KGWyQeremz35urirxraYdubNSi50RUs29LVwCKdW4g.6p-vlT6aP_zLTp7HjX6UhA.5HrfcQY8dpngqym3iwvaee6VxR8LNStmJ9t__ByN8SbEwsEf6mOgpHUrbEesfPof-YKyV3kha9aMzinBmOYA6d1tI5ek80MnjEdse31rO3jI6FI_5XmsJvc-qG_vm_C7HOowtNCuQ4dj_tSTA7WkEs65fj4GfvlXC-A7a3PJNMpa5jmxO-g5ZyA76841SIr5K_NFHzDaTQ75QiOP_Vh1y2nLyf0izFXqh-Ibden8wH1Tnx9KhNC_APbWSCcabQjjVmhxE_jy8bAbh-gjB3BIOZFRjGyEvadUq07guBC9TtHhTklhUYvlfSD6ZjrgfxFZb4F29PEXvfuIWHekCdcO0SWdzcNYGJyjmfLoJJEz4rQ.j3uS6tvny5Yy-HfsEYd8Tg","fqdn":"ww38.satellite.exchange","domain":"satellite.exchange","tld":"exchange"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.satellite.exchange/","date":"2026-10-08T15:46:12.258Z","timestamp":1791474372258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.satellite.exchange","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 09:14:12 GMT","end":"Tue, 05 Jan 2027 09:14:11 GMT"},"fingerprint":{"sha1":"7A:9F:0F:EF:7C:28:3F:D9:41:04:27:92:4C:04:FB:5E:6F:62:29:58","sha256":"AF:1B:55:E9:49:24:CD:CA:2B:BE:E2:31:7E:DA:AA:EE:08:99:0B:B0:7E:D7:DE:2B:15:95:93:EA:19:01:8F:63"}}},"request":{"raw":"GET /6776b92c-3888-4afd-8a72-89cd1d9ef786/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.wBr5lxvKFJd_KGWyQeremz35urirxraYdubNSi50RUs29LVwCKdW4g.6p-vlT6aP_zLTp7HjX6UhA.5HrfcQY8dpngqym3iwvaee6VxR8LNStmJ9t__ByN8SbEwsEf6mOgpHUrbEesfPof-YKyV3kha9aMzinBmOYA6d1tI5ek80MnjEdse31rO3jI6FI_5XmsJvc-qG_vm_C7HOowtNCuQ4dj_tSTA7WkEs65fj4GfvlXC-A7a3PJNMpa5jmxO-g5ZyA76841SIr5K_NFHzDaTQ75QiOP_Vh1y2nLyf0izFXqh-Ibden8wH1Tnx9KhNC_APbWSCcabQjjVmhxE_jy8bAbh-gjB3BIOZFRjGyEvadUq07guBC9TtHhTklhUYvlfSD6ZjrgfxFZb4F29PEXvfuIWHekCdcO0SWdzcNYGJyjmfLoJJEz4rQ.j3uS6tvny5Yy-HfsEYd8Tg HTTP/1.1\r\nHost: ww38.satellite.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.satellite.exchange/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Thu, 08 Oct 2026 15:46:12 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":136,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"ww38.satellite.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}