I think you mean the distilling is a secondary activity by another party. Primary seems it's just a stolen api key and there's likely a broker running some kin

I think you mean the distilling is a secondary activity by another party. Primary seems it's just a stolen api key and there's likely a broker running some kind of pirated router. Which makes the most sense with random unconnected testing.