Event Investigation

Back to Security Events
MEDIUMConfidence: 81%
Rule: RULE-NET-109Incident: INC-2026-0818

Unusual External Destination

What BOSS Detected

Outbound HTTP fetch observed to an unverified external analytics domain with unusual query parameters.

Observed Evidence

Destination URL:https://api.analytics-unknown.net/v1/telemetry
Content Type:application/json
Payload Size:1.8 KB
Redirect Hops:0
Matched Indicators:
Unlisted API hostHigh-frequency POSTCustom payload entropy

Correlated Detection Signals

Unlisted destination domain
85%
Request entropy threshold exceeded
77%

Event Sequence Timeline

13:50:01
Fetch interceptor observed outbound request
13:50:02
Domain checked against baseline allowlist
13:50:02
Finding generated & dispatched to telemetry queue
{
  "event_type": "NETWORK_ANOMALY",
  "agent_version": "BOSS-SW 1.0.0",
  "rule_triggered": "RULE-NET-109",
  "confidence_score": 0.81,
  "target_url": "https://api.analytics-unknown.net/v1/telemetry",
  "method": "POST"
}