{"report_id":"5bd0e4cb-ac7e-4e08-8a5e-01ce27bc1ff5","version":0,"status":"done","tags":[],"date":"2026-09-08T20:24:32Z","url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"title":"Stranger Things","dom":{"size":53318,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10440)","md5":"79277ee7e25cef0e59272ff375ccf921","sha1":"edaa1a5a5b3b34b561471c8a40bf84e78b95880f","sha256":"498488d5d1322eba9efc9e8822996b74ef77b6ef43fe56bbf3c89d5c946f371d","sha512":"c950c8fd96fafefcc6e136cc7f4e1d39537c76da8fced4a9dfbb62f85c3c02d5f9b6a1b00e935134cde9f65c574e73d28d778b41c6fafec3e7ed157d4a4d3b1a","ssdeep":"768:m+rhwUTbgn8S4dK7Vnw+izVkKcTH1v6vYPRrzI48oVVyuCLz:m+rhwUTbg8K7cSg","tlshash":"cf33448cd27052a589835348fbf397be103943966e260df9f35c0a63bb4adac578b543","dom_hash":"domhashe8115cc2165dbe3aa0e59478a4771c1c","first_seen":"2026-09-08T14:37:30.885942Z","last_seen":"2026-09-08T20:24:34.204472Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T20:24:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":22343,"sent_data":637,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rebellatogui.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-09-08T14:37:28.519181Z","last_seen":"2026-09-08T14:37:28.519181Z","alert_count":25,"request_count":25,"received_data":815636,"sent_data":13850,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":25884,"sent_data":1691,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":4,"received_data":141012,"sent_data":1968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/SplitText.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8321155086482ce33eb104d55b66e05c","sha1":"e79cdf6806a8398ab5455edfd1c240c817609832","sha256":"206e351b5dc4035dab4f85dc20eacf0fa59bc9b27c8f5a362a1e18dfda63ae74","sha512":"c101e49ffd72e1f584633a9d2847b56c889be77a5d9288cb9d4d93d951d930f0c9501c110dc91ea848e9380ea0c6238ddcc109d40d60b482544893cd7f7647bc","ssdeep":"192:I5aXsNguSAji8/GDZ+AqYuhHqwO9v5bUfV97a5kH6GR9q4HMkv:I0juSAjisAqYuhHdO9vUhx6GRfv","tlshash":"32f1d77673181873979822c905db9384f27015795c0b286df1aceeee2169d8230fef76","size":7506,"data":"","first_seen":"2026-01-14T12:06:22.561882Z","last_seen":"2026-09-08T20:24:34.218824Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/script.js","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe93cadeb8701bba340bd8c48417072e","sha1":"ecdf6a5bd5818fa75e0c14f96e48c6f2e4f0f496","sha256":"ed69332b3dd91481ca8e9b1bcc39b5b94a94a52efeb70630393e02b5bc8ada79","sha512":"df1df207fc756e54c7f2b1b0beab3cf89625544cadbacaf2e3222fc0100c0e03a654727319ab4d14c59468fb32ba95360707f6d7223b666f34e7766c0d29fd5a","ssdeep":"","tlshash":"9f41ba5a86b41030266b05b78bea5a0121a152cfac1ffd10b6cd96482f2d3eee276764","size":2051,"data":"","first_seen":"2026-09-08T14:37:30.925987Z","last_seen":"2026-09-08T20:24:34.238624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/gsap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07c2d42a6beec72b1bcb836fa5b7f63e","sha1":"e121f574ea4d90a0680872167e2f3c21014d795e","sha256":"b216c8122377d9b94baed346799cfaaa7a010ddf3cdbea815f689ad3304c4462","sha512":"e2a6a83667016d1149e61d03d35569c4f3807a44d8c853db6d9599467f67a0fd44811eeb5ba6b2d2a25b570b59d53f18e762a4e83d8115a9020b0c2c4466bb6f","ssdeep":"1536:CEL8dtzsPgp5qaAwTDKpQ9V1RsNOp5Rd3OYXRGoB2bxt5Ek:cdtIPkX78QpNBXRGoMx/","tlshash":"b163f9c93292f427439751a1447f094bf337a998640f0918f265e4cd7e3c9ae427be7a","size":72779,"data":"","first_seen":"2025-12-09T17:53:42.448617Z","last_seen":"2026-09-08T20:24:34.216268Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/ScrollTrigger.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e1009241250045b1c69b567ea2a404","sha1":"65af5a3012f2874ad54dd42cf73dc5614e42a624","sha256":"f118ac1dd8d3c8d1a4af08c3c59ef2f54bff449e55c5cf486a992b0711fef30d","sha512":"d5849cf2a935b4a0a4f20f917d934bc6579bfe3cfefe5034bf7af98501fe77e93a1510b597083f9eb402cdcaad62a08d8f3e1550080ff8f8778890b87ba687f5","ssdeep":"768:bW0jvvlec1SYK2Ywz3Rx2BMKAzUXrm3G5zuctuRh39hT2TWvsci:hVp4YK2Yg3LvKAz8rm3GRuSuRhXST2i","tlshash":"941319c93244b072679f62ba942f120a733654dd281e4055f361e5e83cbd9bd873be6c","size":44235,"data":"","first_seen":"2025-12-09T17:53:42.446286Z","last_seen":"2026-09-08T20:24:34.226869Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/ScrollSmoother.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95655fc5a4d9d9f202c0020434435636","sha1":"0c1353db1044f1fe5c055ff605fd6eff08acacca","sha256":"814f79c458dda325ee671b8beef2b92efb9a5b4ed0d195b815a4a4804f44355b","sha512":"3fb60a3cd5c878e41a019d34fcd9331dd1f02b645bec61bf4637e051e0c540ff35bafebbe8d8c553771f06a31061c67aa770dfb7adf208d288d2b76ee77e4034","ssdeep":"192:FWsj6bqkNOFFpg54JTzTaWYjIS4RpltJpGj8r5kNSnLU+qyyMzPPZNPXMBCu:0o7noWY2ujaHLUuyMzPPZC/","tlshash":"2352d7e93348b4220bdf52ba846f2705733554a8490e4054d639fcdc3c7ca6d5babead","size":13373,"data":"","first_seen":"2026-03-08T18:28:11.970431Z","last_seen":"2026-09-08T20:24:34.220739Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.639Z","timestamp":1788899043639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 20:24:03 GMT\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":1594,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-09-08T21:32:59.096427Z","times_seen":51680,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/footer-parceiro.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.675Z","timestamp":1788899043675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/footer-parceiro.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb7-12cf\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E74E:7271D:8C7893:9A0093:6AA06EE1\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.678781,VS0,VE111\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 03a2caa90123ed747af02cf6a9df806da133ff47\r\ncontent-length: 2221\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":4815,"size_decoded":2984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1cf09807c999a4a34e24b30d2bd2a65","sha1":"4592c58f27d1f7db8e203b2846333a12e4542d78","sha256":"aa043f968f124631ba3c47245fbc2758cade7d97534b0fd852f719c8b38dd4ac","sha512":"40ab6ca07fde18b1e430f539d098306a25a4cc6f9cb8b0b502b380b41df12c9a9eaaff9258846ad3393d2bd64de30036e6b26d758460b13e41f891bdd84c1cd9","ssdeep":"96:6faRBykv1jxG0v4a7FKp9Kl711V8+BMGG+MYH4m+Hnhf:6QB9jDv4ahKfKtfVfTGeYmc","tlshash":"71a1e8d91391e3ed6804f3d9d63128617a8a38f9ff9197a9c3905b197ab408c4c24cd7","first_seen":"2026-09-08T14:37:30.927799Z","last_seen":"2026-09-08T20:24:34.207081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.802Z","timestamp":1788899043802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rebellatogui.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 03:06:11 GMT\r\nexpires: Fri, 03 Sep 2027 03:06:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 494272\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-08T21:33:58.628848Z","times_seen":288397,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":30,"dns":1,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.805Z","timestamp":1788899043805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rebellatogui.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 03:19:31 GMT\r\nexpires: Sun, 05 Sep 2027 03:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 320672\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-08T21:33:58.61774Z","times_seen":310221,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/card3.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.787Z","timestamp":1788899043787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/card3.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-9f9a\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 991E:17546:8ED03D:9C57DA:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.789805,VS0,VE117\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c11ea2f40471d16b4c8f939d0785fd0e6edf61e9\r\ncontent-length: 40858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":40858,"size_decoded":41572,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0714a1328bfaace67411222516a7551","sha1":"fdeb1ef869f58043c24573b323074752864a2323","sha256":"63720057645dc764f3bba409981825ac2f75bb3e04202abcb180b62a7fdd4d88","sha512":"73599afff198d5cac8d8e8541def9ca437e2f8f0a46532ef241e8649cf583cd2bec8c5d7c7e521f835f69748c94b0b7aa316579609df2f14c9c2794cb4c3002a","ssdeep":"768:uTgZjtrx53jRTw/4nwLeDwfqzgSF++lQ4YL83ea0MJG6MgueU:zZjtrx5zRToQc5SgSWA3eatmeU","tlshash":"ab03f2e39b2e795ac3d753b034b59390525d0e09b639525b2f924b5ece33c84c393668","first_seen":"2026-09-08T14:37:30.902299Z","last_seen":"2026-09-08T20:24:34.210287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/clio-logo.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.668Z","timestamp":1788899043668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/clio-logo.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb7-10cbf\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 37CC:D8E0A:8DDC49:9B6414:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.671065,VS0,VE135\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ec69eb40e45f583beb32e01fd07e55bedf825268\r\ncontent-length: 46824\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68799,"size_decoded":47589,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea9f114c0552756011c56c1f48835454","sha1":"710cd4d30728e430d8e219e2e9e59ccb40a90e8a","sha256":"bf84b387dc9f69da86ac5314a43837b8c6bad07aa8e794f7e4e237d54484a90e","sha512":"b00ebdbe9842f8187bc756ad9a32cb12e1d781880f790fff61b2b9a33a1f7b99ce008e9453daa476da829a069aae29a17f3c5885e728e04dc1ad2b2cdf169a3a","ssdeep":"1536:LdMv5PSf9x3xuaAbmBAIsZYPgHU3hj46g:SRox3xx2uPg6jbg","tlshash":"a463d1fb3644ef90f986abe4e533840463196c3f6fc08b67d35d9ed10f895a98890e51","first_seen":"2026-09-08T14:37:30.924099Z","last_seen":"2026-09-08T20:24:34.211835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T20:24:03.045Z","timestamp":1788899043045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: GitHub.com\r\ncontent-type: text/html\r\nlocation: https://rebellatogui.github.io/strangerThings/\r\nx-github-request-id: 251E:3D9BA0:8AE0CE:984EE1:6AA064DD\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 2565\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788899043.079373,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 86811527d47f7a470594a2e3ec56e7a509adb972\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T21:34:06.024237Z","times_seen":18353239,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/img-dep2.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.670Z","timestamp":1788899043670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/img-dep2.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-680\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: E5CA:F6750:8D9838:9B1FB6:6AA06EDF\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.673600,VS0,VE138\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3dc2372d73ec602d1cd89117e171b6f042c5f13c\r\ncontent-length: 1664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1664,"size_decoded":2376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb1827bf7b2e79cfdc1cda533b837a8b","sha1":"7641711c196a0cdb01e5d6607bd16339bb530c3a","sha256":"27f59ee6ce062616b8e3a5328c5d7f902eb9becf1d638a1c099a59dd5140f2af","sha512":"8fb923abe07df0a6456b5742ed3db34f3495a9fd8efea833b30883330825be628369f0d157964d4be1d278118ca6e5868cea5458304bc6c71fb03f8312f97d8c","ssdeep":"","tlshash":"1931952693b6c73de0430bf850666f92e7b3b922930a1faa4144373113485969e5c1de","first_seen":"2026-09-08T14:37:30.906418Z","last_seen":"2026-09-08T20:24:34.214099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/favicon/favicon-16x16.png","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.974Z","timestamp":1788899043974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/favicon/favicon-16x16.png HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-1cb\"\r\nexpires: Tue, 08 Sep 2026 20:34:04 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 99CA:F6750:8D9846:9B1FC2:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.977139,VS0,VE114\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 22df4f38360368b90c163842071229c4e3098fc1\r\ncontent-length: 459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":459,"size_decoded":1190,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7ac6145279a3705deccedde8399da93d","sha1":"2116300be803f45ecaaae7c8f8f07584b10f44e0","sha256":"d3718c096f063103fcd68d7acdc3e3d2c7d9cdd60c89c7a6c85f4c10ad06d7ce","sha512":"1127eeecb37420347fbb65d04bcdbf96b494259a4a8a1671bb9a9119ecb3d247a398bb97e0cb04c3837b09c8efdd16372709e690446b1fc811c8dd8ae919e20b","ssdeep":"","tlshash":"56f0d490945bbce288d6a01693e480686d919b754341cea4141f5258e89d665c18c151","first_seen":"2026-09-08T14:37:30.921426Z","last_seen":"2026-09-08T20:24:34.215305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/gsap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.647Z","timestamp":1788899043647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/gsap@3.14.1/dist/gsap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 29289\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.14.1\r\nx-jsd-version-type: version\r\netag: W/\"11c4b-4SH1dOpNkKBoCHIWfi88IQFNeV4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nage: 5990528\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72779,"size_decoded":30065,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65323)","md5":"07c2d42a6beec72b1bcb836fa5b7f63e","sha1":"e121f574ea4d90a0680872167e2f3c21014d795e","sha256":"b216c8122377d9b94baed346799cfaaa7a010ddf3cdbea815f689ad3304c4462","sha512":"e2a6a83667016d1149e61d03d35569c4f3807a44d8c853db6d9599467f67a0fd44811eeb5ba6b2d2a25b570b59d53f18e762a4e83d8115a9020b0c2c4466bb6f","ssdeep":"1536:CEL8dtzsPgp5qaAwTDKpQ9V1RsNOp5Rd3OYXRGoB2bxt5Ek:cdtIPkX78QpNBXRGoMx/","tlshash":"b163f9c93292f427439751a1447f094bf337a998640f0918f265e4cd7e3c9ae427be7a","first_seen":"2025-12-09T17:53:42.448617Z","last_seen":"2026-09-08T20:24:34.216268Z","times_seen":132,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":4,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/card2.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.785Z","timestamp":1788899043785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/card2.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-67c4\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6B32:0A48:848628:90F4C7:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.788436,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c40b3d263b11126fe9b5a0742ed7091fa9265bcd\r\ncontent-length: 26564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":26564,"size_decoded":27298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccf3d2dc0431925b5d737a0deeca4e25","sha1":"efc5df10fd0071886aa120ac70ae369e28e95f9d","sha256":"1d7c5c6c3cc55e0c80e5e1c4fe82161a217356ad8722bb5d4f919ec6e21e4c52","sha512":"2df0ffb8218f20aa4e87274bd8f28f0af1c20a3f0e0dc580e350920e360effb03f90de24a81c5005ee78778a3c8f212633c48790054310a11a8aa4effd65cb9a","ssdeep":"768:wTAPLXkerTm5hPxEzQ0C090VRbg4lcJ+jH6sGTM3hYUKlD:fP4YTm5RxqQ0C09kRFl9H6syM36UKlD","tlshash":"74c2e0239fa31360d792b3789ca40111ba4d655571ba23283efa21121bb19df5df4bc9","first_seen":"2026-09-08T14:37:30.909234Z","last_seen":"2026-09-08T20:24:34.217455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/SplitText.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.652Z","timestamp":1788899043652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/gsap@3.14.1/dist/SplitText.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 3607\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.14.1\r\nx-jsd-version-type: version\r\netag: W/\"1d52-55zfaAaoOYq1RV7f0cJAyBdgmDI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nage: 2212856\r\nx-served-by: cache-fra-etou8220106-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7506,"size_decoded":4381,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4616)","md5":"8321155086482ce33eb104d55b66e05c","sha1":"e79cdf6806a8398ab5455edfd1c240c817609832","sha256":"206e351b5dc4035dab4f85dc20eacf0fa59bc9b27c8f5a362a1e18dfda63ae74","sha512":"c101e49ffd72e1f584633a9d2847b56c889be77a5d9288cb9d4d93d951d930f0c9501c110dc91ea848e9380ea0c6238ddcc109d40d60b482544893cd7f7647bc","ssdeep":"192:I5aXsNguSAji8/GDZ+AqYuhHqwO9v5bUfV97a5kH6GR9q4HMkv:I0juSAjisAqYuhHdO9vUhx6GRfv","tlshash":"32f1d77673181873979822c905db9384f27015795c0b286df1aceeee2169d8230fef76","first_seen":"2026-01-14T12:06:22.561882Z","last_seen":"2026-09-08T20:24:34.218824Z","times_seen":51,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":10,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.801Z","timestamp":1788899043801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rebellatogui.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 02:57:30 GMT\r\nexpires: Fri, 03 Sep 2027 02:57:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 494793\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-09-08T21:32:59.075179Z","times_seen":399983,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/ScrollSmoother.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.651Z","timestamp":1788899043651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/gsap@3.14.1/dist/ScrollSmoother.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 5592\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.14.1\r\nx-jsd-version-type: version\r\netag: W/\"343d-DBNT2xBE8f5cBV/2Bf1u/wisrMo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1906515\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nx-served-by: cache-fra-etou8220076-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13373,"size_decoded":6366,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13148)","md5":"95655fc5a4d9d9f202c0020434435636","sha1":"0c1353db1044f1fe5c055ff605fd6eff08acacca","sha256":"814f79c458dda325ee671b8beef2b92efb9a5b4ed0d195b815a4a4804f44355b","sha512":"3fb60a3cd5c878e41a019d34fcd9331dd1f02b645bec61bf4637e051e0c540ff35bafebbe8d8c553771f06a31061c67aa770dfb7adf208d288d2b76ee77e4034","ssdeep":"192:FWsj6bqkNOFFpg54JTzTaWYjIS4RpltJpGj8r5kNSnLU+qyyMzPPZNPXMBCu:0o7noWY2ujaHLUuyMzPPZC/","tlshash":"2352d7e93348b4220bdf52ba846f2705733554a8490e4054d639fcdc3c7ca6d5babead","first_seen":"2026-03-08T18:28:11.970431Z","last_seen":"2026-09-08T20:24:34.220739Z","times_seen":13,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":11,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/fever-logo.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.669Z","timestamp":1788899043669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/fever-logo.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb7-9a1\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 5216:3D9BA0:8C0E76:99967F:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.671784,VS0,VE159\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4565771fe6f1be689b82b14f8ce530b360c81145\r\ncontent-length: 1096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2465,"size_decoded":1838,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2991a6a22e4a762c6d495fc71d57c27b","sha1":"844fb0d88c0a9694b3af6f0dbc97fd9c5b53cb69","sha256":"cffdae2017b5826939e7b4bb4e6b1c437821fff91c9e7d73bf0e10dc2c2a5e5b","sha512":"d27035f0cc2c77db634efff2165e3b50ed882b42c6b7f7a693dd7d6196a1e8db9ba007dbe57e22d9a7594577dd3b4599ab9060885af0c02082ba25cbbc5dcd49","ssdeep":"","tlshash":"875122570b819aa4b1c86b74aa3419a95dc33db53c41cbdc827cb93a527108c8cb8d4f","first_seen":"2026-09-08T14:37:30.911836Z","last_seen":"2026-09-08T20:24:34.221849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/bg-sec2.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.782Z","timestamp":1788899043782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/bg-sec2.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb8-16370\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: F586:101BB1:8DFDCD:9B855E:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.785565,VS0,VE163\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 13e7a9bf880a045a4fb4b65c0fa55b17a5b8eb12\r\ncontent-length: 90992\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90992,"size_decoded":91729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd71b0ca36f19bada8b5cfbcc5f2167a","sha1":"d55fedbbced1c27c8ba4df78ca12d736a59de526","sha256":"e355565e557ac90f1a2104a48b9dd6a0e413271f19e9d8bd1a6d780515c0103d","sha512":"fa744a3c453860f72ccc5af647e4ea1ea6705991c7c466d8bd7cda3d678b817f887a805f58401fbd7c6dd464defbe10fc1446d2bd158856e17f86e0d86fd22c3","ssdeep":"1536:GrgZhZCVg3ZvX4xtIXU4QTZrh7QWVkvkrcjwjoFBdEv8EgLcKfGqS/hSStWhED:+YSkv4xtIk4kr+W2kiBa8hLfOvggd","tlshash":"e79302c86b28a511f84c23fcb65e2e4f47c74d4bbc6782dc492f189175f272e9b11926","first_seen":"2026-09-08T14:37:30.890747Z","last_seen":"2026-09-08T20:24:34.222819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/card1.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.784Z","timestamp":1788899043784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/card1.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb8-6076\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 09BC:7271D:8C7899:9A0098:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.787099,VS0,VE126\r\nvary: Accept-Encoding\r\nx-fastly-request-id: bc46584042effdce747fca91e0a393ce05ec6961\r\ncontent-length: 24694\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":24694,"size_decoded":25429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12d2939b87e2c98cc88d95e402108c75","sha1":"97eb72fc3d917c4e8f06bab5cc11646e551921da","sha256":"859fc87b399c5ce840490f727f9adcdb4e841fd0a6e0176a207d32794d136e6e","sha512":"fb8bf8deceb2115876e24090c3107380960e2a4bc9a1f2ea2b2f97dcac3a6349959c6e767f0082faba1a3989cf4a31499c7a80633e3f8004b94d012f9badce18","ssdeep":"384:mwTZAyEAgvla6bSI18N3BLmD9LbdNI+XEwM4eJOz63B4GPBJw55MN1SuZLlu:fTBgvzR4Fe9YIEwxeJOe3mmY55qlu","tlshash":"c2b2e124b47e539afd0ee6b8473003c7c8c1bd1703391577499ceba12a98c5de99a2f8","first_seen":"2026-09-08T14:37:30.92901Z","last_seen":"2026-09-08T20:24:34.223977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/seta-botao.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.667Z","timestamp":1788899043667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/seta-botao.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-c4\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 44C6:2B5ED:8CB62C:9A3F32:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.669983,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8f8ecd26fe6c516218770c413df507ce476238f5\r\ncontent-length: 196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196,"size_decoded":930,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de009d51bd6557084cde4be5de6afa02","sha1":"7dd291de6a121dd1cd06c53b6e5735ae5c99a5d3","sha256":"6a663fb54ae22b2649d7691607c4b5292ec869612dde042e7e23388ebcb07d60","sha512":"cdf38e04c8808bb5a06b1efda32a8e5b7b1a544db90ca0feab51ddd519f8f67bb162a15ac2433cd87c1a347e1547cc134580f1cee2eb98c41697bf801f53ddfd","ssdeep":"","tlshash":"88d022ace688ea20f0148100eb28e01488a6b0c7924c40a2d805272bf0449db78332ec","first_seen":"2026-09-08T14:37:30.898221Z","last_seen":"2026-09-08T20:24:34.225738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.14.1/dist/ScrollTrigger.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.649Z","timestamp":1788899043649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/gsap@3.14.1/dist/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.14.1\r\nx-jsd-version-type: version\r\netag: W/\"accb-Za9aMBLyh0rVTdQs9z3FYU5CpiQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nage: 2356203\r\nx-served-by: cache-fra-eddf8230106-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 18235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44235,"size_decoded":19030,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44011)","md5":"e2e1009241250045b1c69b567ea2a404","sha1":"65af5a3012f2874ad54dd42cf73dc5614e42a624","sha256":"f118ac1dd8d3c8d1a4af08c3c59ef2f54bff449e55c5cf486a992b0711fef30d","sha512":"d5849cf2a935b4a0a4f20f917d934bc6579bfe3cfefe5034bf7af98501fe77e93a1510b597083f9eb402cdcaad62a08d8f3e1550080ff8f8778890b87ba687f5","ssdeep":"768:bW0jvvlec1SYK2Ywz3Rx2BMKAzUXrm3G5zuctuRh39hT2TWvsci:hVp4YK2Yg3LvKAz8rm3GRuSuRhXST2i","tlshash":"941319c93244b072679f62ba942f120a733654dd281e4055f361e5e83cbd9bd873be6c","first_seen":"2025-12-09T17:53:42.446286Z","last_seen":"2026-09-08T20:24:34.226869Z","times_seen":92,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/netflix-logo.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.660Z","timestamp":1788899043660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/netflix-logo.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-4c5\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B532:17546:8ED03A:9C57D3:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.665600,VS0,VE170\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 031fbd39e0ea6d762ab8f03cd0be8812beb49d21\r\ncontent-length: 685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1221,"size_decoded":1425,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e220a22627582ffe23d5daa8a54da406","sha1":"159f61e981d076dac1296344c9d6ed5da4ec0649","sha256":"7d0a440e10b6513fba72ccbb3fce8ba35aefdedae66f6d61d8dbaf68546355e0","sha512":"d7af7d26462caf35dae5dd51e27b02b4c76fca59d14a62dd3eedf7ca9530efaac5463261ebab422adc4df94dadf08fbdae4abd4641f469d59439ab53e0015de7","ssdeep":"","tlshash":"1d21547073e0e7e9a004d3d9763ca91e745729fbfb15c929c661193ce40249cc4eda82","first_seen":"2026-09-08T14:37:30.89446Z","last_seen":"2026-09-08T20:24:34.2284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/img-dep1.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.670Z","timestamp":1788899043670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/img-dep1.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-734\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8116:09EC:6FADEA:7A00E8:6AA06EE1\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.672769,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 38f637a4cf2834e23ba3046b7ed335fa52cb14fa\r\ncontent-length: 1844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1844,"size_decoded":2555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42f3860e72f946e7e448d931449e1dfc","sha1":"ee3322275b8d1436ac870be36e857d3aba442448","sha256":"6d83164e30b62d2433c9e58e520931ab962430ded9ac44d6f717c3f1cebbc794","sha512":"27317ae2d0585e78396ff880cddabcf46320b064c2f13a9be1a3f708bf8cd39bac14ccb62efd862f18415a23961eb93886d42320807fffd375d3bf48d5dde8b8","ssdeep":"","tlshash":"1331d6783399af7cdb213630912093f263687c5594279fb7d18554220761cf13a10386","first_seen":"2026-09-08T14:37:30.925202Z","last_seen":"2026-09-08T20:24:34.229703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/footer-twitter.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.674Z","timestamp":1788899043674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/footer-twitter.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb7-1fd\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: F302:F6750:8D9838:9B1FB7:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.677897,VS0,VE146\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 815e5922de71e27f4e32e9836b0c45bed81ea780\r\ncontent-length: 312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":509,"size_decoded":1052,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92c7419befcc4bb841af5c320dbfe22c","sha1":"72c40d4c8a16c8ad881833c8e03b34c660551a01","sha256":"b14383a80434b9e64f8e3cdddd74969fcb999c26c6d101b32262f27f1ed378e9","sha512":"f950778e04d9e426c3ef665c20765721520f40002f8e3f7903a5a33e658ca874ab8587c1897adbc2b90475571e53858d97d3d9de72111c3bde31dd8d5f57a5f2","ssdeep":"","tlshash":"59f09e3a51a80ebd702b0310d2e030e950ab3d7295b1919884b62a32e31d74e0f3ecb5","first_seen":"2026-09-08T14:37:30.908135Z","last_seen":"2026-09-08T20:24:34.23067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/bg-2.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.665Z","timestamp":1788899043665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/bg-2.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-20df6\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7098:7271D:8C7893:9A0091:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.668866,VS0,VE168\r\nvary: Accept-Encoding\r\nx-fastly-request-id: e7412f29106ed066df4a667e59818151f24a2acd\r\ncontent-length: 134646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":134646,"size_decoded":135362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"155389b839a0ee0aaf150f73d84a8e2a","sha1":"9f2ed13dab20e99cd9144ab6f130eec853339cee","sha256":"8057a105acedb0e98605f8f22d3e03ed8723817ec4f6a8d4027a6e706e226eb4","sha512":"56affd98b3ba4013d3271076cf72f25e03855ff6f8b817f305c9a7af9f0f4c1114aac0264f4e2fa32ac69463ee8570ebd063943cda9b24309f4b7fe5d943b248","ssdeep":"3072:dAZps58XAjxZLpN8zAaXbnidIs5XFrMjsdys/waRC9G:H58XAjxZLHTaXGdz9M8f/M9G","tlshash":"d5d3f008f338f628dd1c2cbf97f0905de1d79540b86b769c2af616caa13a457331586e","first_seen":"2026-09-08T14:37:30.926921Z","last_seen":"2026-09-08T20:24:34.231909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/footer-instagram.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.673Z","timestamp":1788899043673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/footer-instagram.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb7-38d\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4AAE:3D9BA0:8C0E76:999680:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.677753,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4084167f3fa66c4982d2e6c2dbbd407ac03826d5\r\ncontent-length: 506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":909,"size_decoded":1268,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2e1662815948660d48f0c55b481da35","sha1":"71b477afc3be6177b2003f64f5daa0651cf31680","sha256":"ae6bbeb36289135fd7a948a6cb6ddb6ae8adbc57838be3f893b8b951fcaaa9bc","sha512":"c0f9193da10ed44cc04b733bafc932f418ae7d0be07d051f144b22252c774b2d646cef7473d5938dd1f153fd700f497693cf2b8172fc380ee1ad3b42c3287f2c","ssdeep":"","tlshash":"b11100f9b3502ad8b81843b0e170717468d76afa4100a646c3985c74e59252c9ebac04","first_seen":"2026-09-08T14:37:30.91271Z","last_seen":"2026-09-08T20:24:34.233205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/bg-footer.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.788Z","timestamp":1788899043788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/bg-footer.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb8-11798\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0F3C:17546:8ED03D:9C57DB:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.790548,VS0,VE169\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2dc62dab7417b20c458b66b5bb3e9de1a1c25b83\r\ncontent-length: 71576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":71576,"size_decoded":72312,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a8cb9ff199e499dd16e8d296293ee4d","sha1":"6ce36a1ad5557c9c3516dc2ff5c2628c5e5c8c8c","sha256":"59e1c2fe995bde06243da2455354da08846c7d4d0d895664cbda1f5acf87c073","sha512":"2554262e5bd3e214e90f725ffaaf82cfab51279f8c6709a82b5252124018a2efa19231284d3c32e8f741ceb4a74351743dbafa9e3366353556be0287fe35be38","ssdeep":"1536:Vx/NQlFxl3x2DA4SjOfI0kLGjr/iw8QCGDT/zjS0Chkl+Vel4a+0:VzSFXg73ULKiw8ST/ze0ChoN6+","tlshash":"2e6301a5afebfb78e80f7b39e9330ad4411281c8f53572765c1b131a059616810b8aee","first_seen":"2026-09-08T14:37:30.904385Z","last_seen":"2026-09-08T20:24:34.234319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T20:24:03.092Z","timestamp":1788899043092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/ HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-7589\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8528:3E87D0:8D72D2:9AFA31:6AA06EE2\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899043.095276,VS0,VE112\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 942e08282a05221dad0eb7283c354af5368bd48a\r\ncontent-length: 12434\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30089,"size_decoded":13189,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7101)","md5":"7f6988086637dc309fadb43677b6a909","sha1":"2b828597b555d7c01f623b5c62126d7b856eb886","sha256":"ab83813baf482abf466e33be4255cd4f9aab10697d3f73c0dc80adde89f25db6","sha512":"4e187eaaba14fe61d1ca7e933eae16933e9f82a8dbbc2458f8fbf50147c7a3e00eb96d7e84665652db603dbfddd3c593c812b2114f496d7d6021caa859df8ab6","ssdeep":"768:oBQ9iaBKrS4dJ7Vnw+izVrKcTH1v6UYPRrzI483VV9uCLX:oBQ9iaBIJ75DK","tlshash":"78d2c5ed27f456e1e581e3e6ef1204a57d4e94bb97194b14f3ac0e883f8284c8e578c2","first_seen":"2026-09-08T14:37:30.914325Z","last_seen":"2026-09-08T20:24:34.235832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/style.css","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.642Z","timestamp":1788899043642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/style.css HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-1c7d\"\r\nexpires: Tue, 08 Sep 2026 19:51:18 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6606:0A48:834C0A:8FA0C0:6AA064D4\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788899044.645294,VS0,VE117\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2f08b9d79cd98880d8e8f5f3569ea4c31a05ccb4\r\ncontent-length: 1865\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":7293,"size_decoded":2615,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text","md5":"7f808aa51f89bc41e79bb786c7cfa718","sha1":"623f59c3f541a3cc818829a6c874945eff54b1df","sha256":"fdb808c7fbe52281ec4c3d105076bef9e01a0742d4360c733f6770ae6b52c152","sha512":"b3ed9a99e511479a31d26e8c8cad2545845597b51821de8661f101100494d675fa72b51a9f3288fcfc1f33f3ec8a62c8ff4f7b75f927b08e975720ca0e2e4e94","ssdeep":"192:rBqX9cLJN9STQi+B1XKRdP/JR4AfGMs6ca4uoDlec7/S/Pr6kNOLuL5Jdyaw:1eQ2RIePK","tlshash":"6de1aa5a26a711097907f4242ffb57146269c443d24fcd793ead31888fca1a689f27ec","first_seen":"2026-09-08T14:37:30.915417Z","last_seen":"2026-09-08T20:24:34.237268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/script.js","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.654Z","timestamp":1788899043654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/script.js HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-803\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1B3A:3E87D0:8D72E8:9AFA48:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.657486,VS0,VE142\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 62a3a14154d4994bba6352729e7046944b526f25\r\ncontent-length: 814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2051,"size_decoded":1579,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"fe93cadeb8701bba340bd8c48417072e","sha1":"ecdf6a5bd5818fa75e0c14f96e48c6f2e4f0f496","sha256":"ed69332b3dd91481ca8e9b1bcc39b5b94a94a52efeb70630393e02b5bc8ada79","sha512":"df1df207fc756e54c7f2b1b0beab3cf89625544cadbacaf2e3222fc0100c0e03a654727319ab4d14c59468fb32ba95360707f6d7223b666f34e7766c0d29fd5a","ssdeep":"","tlshash":"9f41ba5a86b41030266b05b78bea5a0121a152cfac1ffd10b6cd96482f2d3eee276764","first_seen":"2026-09-08T14:37:30.925987Z","last_seen":"2026-09-08T20:24:34.238624Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/bg-1.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.661Z","timestamp":1788899043661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/bg-1.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb8-309e8\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: C446:3D9BA0:8C0E76:99967E:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.665757,VS0,VE164\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cee583f5dae46fcba73bb9eaf9e69876000fd953\r\ncontent-length: 199144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199144,"size_decoded":199861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f7b3fd82f892d53540a6e4b8adff751","sha1":"a9a42ea338a3a7c6b0b73b2c60b2a65de56584e4","sha256":"e2474321ece911a01c3400ac7d8b95caa76bea111eed625a586c9d98b7248a01","sha512":"7c68a0217b7e3f76e1c879f35ad16cb5fdf9dae145e73557610063857bcd9769f7e48e72c0adafe95a4ff347226e44b016365c39bce38999621ed91681f99283","ssdeep":"6144:KanNcW5PKO9ubv2OnJ4DkxX/9JTQ05VlA:oW5PKO9ubujkzO05vA","tlshash":"4b1423f3c1624292e512022c05395bffffd2eb362c6087beb26d112b4f9a446549ad5d","first_seen":"2026-09-08T14:37:30.89625Z","last_seen":"2026-09-08T20:24:34.239578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/img-dep3.webp","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.671Z","timestamp":1788899043671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/img-dep3.webp HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 07 Sep 2026 19:25:43 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb7-d5e\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4470:7271D:8C7893:9A0092:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.674702,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 604547bc32dd6fe73acbb11f53dcd8ef5ef4c7bf\r\ncontent-length: 3422\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":3422,"size_decoded":4134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d004f5976cee67db3dba3393721478a","sha1":"885c72d46a3e5a419098f78f890ee986936453d8","sha256":"0835b15923ab25d4096e55b9318cf0e3c41c40390dbb7b1f8faf9939c0c595d7","sha512":"b8566e065cf6c22bf09bbdad145724d016048fa1fcba574656b38fb04e4c7c217ccebc8db5136f9d13cb6295a5726744052ebbd11ebabb625d6ce41ee8cb9643","ssdeep":"","tlshash":"1f614bf933610b42ed397a7485165b42cfbee511035dcbb877118a1217488c4fa6c26b","first_seen":"2026-09-08T14:37:30.916399Z","last_seen":"2026-09-08T20:24:34.241297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/imagens/footer-facebook.svg","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.672Z","timestamp":1788899043672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/imagens/footer-facebook.svg HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-1ec\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8256:D2A0B:8CC28A:9A4A7E:6AA06EE1\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.677321,VS0,VE136\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f8ead17979d2723acfb51751a9934e63b3d9b668\r\ncontent-length: 313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":1053,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eca9045dedb580338b310ae59fd04e34","sha1":"74730763fcf5aa9f6ea31f69ab10f228a40a51b4","sha256":"237177ff2f2d045c0d11af25d79d69e46c43bfc386840eb974326b06376e53cd","sha512":"26e9dc42b72ac2fd57c6235b25473954cd94d406e9df792dd3e8f0818f792877f7c9d1cef5193bcb47e60814ea00cbd3bde0280740e70f1feda1c4c207c27292","ssdeep":"","tlshash":"26f02e34e3e889ec622543c4eb7033621023502b6694a852cc723b379392929aaff4a4","first_seen":"2026-09-08T14:37:30.919237Z","last_seen":"2026-09-08T20:24:34.242431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/fontes/Benguiat%20Bold.ttf","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.803Z","timestamp":1788899043803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/fontes/Benguiat%20Bold.ttf HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: font/ttf\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a9f0fb8-10e12\"\r\nexpires: Tue, 08 Sep 2026 20:34:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6FBC:09EC:6FADED:7A00EC:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:24:03 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.806769,VS0,VE114\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 57d75de0b4f9283c3aa4fdbf2ad8c06d03875523\r\ncontent-length: 38193\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":69138,"size_decoded":38952,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"OS/2\", 21 names, Unicode","md5":"ba3dce6ef8e12209cef4a4cf4b5833f3","sha1":"57b5d5b03946b8348212399a40071adb3b909387","sha256":"2ac8d16a7b4166037cc95115d3be19864253af8c24c574f0050c6c97e7c1d407","sha512":"f3629c3f943516df95837895531b1da7e00beaacbf33295cc2d025b553553e6b878c71295eb110b522a7119130b7cf381e0e663249076e160607df3da6277f56","ssdeep":"1536:FCNLTnbUy+vBW1L2ZkLMwfruPYYImpsGQJtazkxTc7eEh5kSqXvl0u:FCNLWZW1kkLMSjE3bgxTcgXvV","tlshash":"30636c16cfadb406c533a230b55aa2298db79d31f306d581f99f8c66dbc0fc4ce29199","first_seen":"2026-09-08T14:37:30.920203Z","last_seen":"2026-09-08T20:24:34.243386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rebellatogui.github.io/strangerThings/favicon/apple-touch-icon.png","fqdn":"rebellatogui.github.io","domain":"rebellatogui.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rebellatogui.github.io/strangerThings/","date":"2026-09-08T20:24:03.972Z","timestamp":1788899043972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /strangerThings/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: rebellatogui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rebellatogui.github.io/strangerThings/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Sep 2026 19:25:44 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6a9f0fb8-350b\"\r\nexpires: Tue, 08 Sep 2026 20:34:04 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 09BA:09EC:6FADF2:7A00F1:6AA06EE3\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:24:04 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1788899044.975877,VS0,VE121\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 58e15bbed91dd9a273cafef4e87126dcaf89ef08\r\ncontent-length: 13579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":13579,"size_decoded":14291,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c7e27b8d481410ad191449d8e1d36fe9","sha1":"00ced23d63d39bee10567bae736cc73deccd0cb5","sha256":"d5195a58810503dad4e993bacdc7491c0a6c67fd1fd14597bae0c6bac3303a90","sha512":"6ec59daa9bc32ef864fec40d9abc02224afd052fd1261946e770f318b1294e497e9332d6c439ff4aab3e6e988b109bf60d35edf067b98bf54f13d42b5e27518f","ssdeep":"192:Lonun7+zBuJNaamLAcijoGBhKYjjjw7l6eijQNlT+SXnU9Slrcr5LrD8GbPSp+:0u7To1aBhKYb0WQTKMYmrcr5z8gR","tlshash":"7052d0e1cd878f8fe7d764128204679510b7617aafa253dd1e0c8afe60873a152679c1","first_seen":"2026-09-08T14:37:30.888584Z","last_seen":"2026-09-08T20:24:34.244686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rebellatogui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}