{"report_id":"8b4624ad-c933-4bc3-a134-79746f3514b1","version":6,"status":"done","tags":[],"date":"2026-01-08T05:59:52Z","url":{"schema":"http","addr":"galie.space/","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.111.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"galie.space/","fqdn":"galie.space","domain":"galie.space","tld":"space"},"title":"Anna's Online Gallery","dom":{"size":2761,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b306128558789bbd5f4b4968f08d143a","sha1":"d02735a134151f9efe2ba92941f15b64c4e234b0","sha256":"7c1f230c2173d64e71299c009862e3da3901b67fa9397bf68b7730e82e4c055e","sha512":"3d5b4944f5980d8bb1ca46386b8c283a4ee028db36326a30c0c0af1c93a63d20745ed1cfc6aab543da5884efaab4a750b1d6f811f85b700b8730540f30264f9f","ssdeep":"","tlshash":"90518635f8daa273640200ea7e73c7c529ccca2185a94d026bfa97c66f50f17c95779c","dom_hash":"domhashb2bb0875fd05a03c0d437ff7d575ff0c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galie.space/","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.111.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T05:59:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"galie.space","ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2025-11-09","domain_rank":0,"first_seen":"2026-01-08T05:59:54.87194Z","last_seen":"2026-01-08T05:59:54.87194Z","alert_count":29,"request_count":29,"received_data":16056402,"sent_data":13333,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galie.space/script.js","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3abd2f5c74b56abade077eb55976478","sha1":"dd0ca3d06b8fe1e1a32926bc0799f31ef251225d","sha256":"e434b10bcffe3d078b2861f48e189792b12440826af712a52c9651b76aff2a32","sha512":"f395cce9d57bec183a4c75ebb4314880cfe13a37b12a5937daea68e98ab6b2c697d635f8ccf5b46d1af86bb632a823342a41df8f7032844139d8ec81a0399356","ssdeep":"","tlshash":"d311d02ab2b4093504fb70b93b4ee60439ed4506b806fec57ddc41510f92d5254fe9fa","size":1090,"data":"","first_seen":"2026-01-08T06:00:03.917165Z","last_seen":"2026-01-08T06:00:03.917165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galie.space/photo%202.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%202.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-25b28\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: ED3C:18F25B:C9BB2B:CCE275:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.430288,VS0,VE215\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9a0647d6a0db1c85eee9c12d6d141b3abae3f8f0\r\ncontent-length: 154408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":154408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1126x1500, components 3","md5":"aa957aab5e08725e70ff6dfe2fa542e8","sha1":"c3e451abef322e33f4878451d0892cb4636c0c82","sha256":"2cb245a536c325f65e7e822bb12c37066b2fffbfa373268a15ec3cb11a90c51f","sha512":"c00651128294faf62ef0c2859137f39b868097a594fa81aeef99a7433b115e042706054993450574b15f4951071504b278f9c83fb50f11ec3ced044296670c93","ssdeep":"3072:j3cdWtYhlv69pNq2sfaLXAdVf9b4ZJrGbg6lrES4awwcpXLag:jMAahcJzeMD6bztESZwwcUg","tlshash":"a0e312a7c1ef0aefc6948b71a6f54bea4c068c9dd98eee2ee19d1d50f012194cc391c4","first_seen":"2026-01-08T06:00:03.851403Z","last_seen":"2026-01-08T06:00:03.851403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%2010.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%2010.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-15e0d\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7A8C:1F89C6:C8089D:CB2EDF:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.455045,VS0,VE137\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 37d53dab0d6f13504249db7361adfc4ea8b0609f\r\ncontent-length: 89613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":89613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 565x753, components 3","md5":"49dde7b378310dcdfe5ca003c363e130","sha1":"0444db003878168ab3c89b0f8cc8f38e72e7a6bc","sha256":"3f2f708ac8bf959ced4ec31e032fff2c85862c99d88f591a1582fe849c055d58","sha512":"88749425c9535713b6895ea61d55c7f35707a7498bf5d9fb42aac6c0719932cc2dc39aaa230ab3a4a6e8cf96b8fba8c5e7f56fa8a0bd1daa4c3852a2ea04c3cb","ssdeep":"1536:/8TN1R41uUPNTP8zUO+wVJ4jXwd9/zAs/eeY1XQdRNM2EBQ6UHg8KQqVFlLbtJ:YN1R4U4D8zUOnWjyz/9RNMI6cNKrtvL","tlshash":"8b9302e64ad39fd6e4cad42b7b03c8551322e904c830c694ef1b964b5b3993d5cbc729","first_seen":"2026-01-08T06:00:03.853118Z","last_seen":"2026-01-08T06:00:03.853118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%2011.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%2011.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-c7c9\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1918:1CC626:C37142:C69661:695F47BD\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.455018,VS0,VE158\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 119e7136543e7f2818b5ef4c8b2608d4feccd073\r\ncontent-length: 51145\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":51145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 565x753, components 3","md5":"a966ed5784d262930e8369a6c4647e4c","sha1":"58785aa10542812cb2372591dbbfec3eb8ccfc8d","sha256":"3582ce9002e5216229ba89337619ac67d1b193dd155ada2c931715feac0967e2","sha512":"0726d1ae044f3c71345d36376a17f949444d98c85e4d5785e3737f153b356202d0a8f3888cf02f3980f4ef53d5e12840407e9ef0bbde544399895e3f4d15c760","ssdeep":"1536:/8V4nHtJ8NMxEAekRJB1dX9xpwSPG1MtEvLk+u3:JnHIAHXvV9xpJP3tIO","tlshash":"cd33027c32d43fb1cb3ca973978eb39ad7e9d73411274a430da31611d3a1aa49904d5b","first_seen":"2026-01-08T06:00:03.85569Z","last_seen":"2026-01-08T06:00:03.85569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid7.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid7.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-1fc49c\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3655:2CB35C:C85A6D:CB80AD:695F47BC\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-2081947/2081948\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.548386,VS0,VE215\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 0d2192cd98b74cbfcb5aa49ac7da53483ef3bf3a\r\ncontent-length: 2081948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2081948,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"4e76709d0dd27f110536f7d7fe683961","sha1":"eb3867317f6d87eb3f0e74bc6cf0e7b93dd9bd7f","sha256":"74333e21b7e8d01c894c842eedf121d2178687202ef33caae14f3ac1b22e4068","sha512":"26be04d5175977d280b87987c2e85847e0953b135f466f1042fbd3c7e727f7ddc7d3642f5c60abde72156cc25a4661c63f610cb6e1c965445610daea8c19abfc","ssdeep":"24576:6WPQK1iCb/jUgV/zmPYklS4Rl2MBJh/FcHJ2gf2kHa:F1iC/FZmgx4D59cHJJ2kHa","tlshash":"b6252324dfb58418cbbba03884d2379661fbd96c12065b8bd571e490ee5cbeb0e9f1c4","first_seen":"2026-01-08T06:00:03.858156Z","last_seen":"2026-01-08T06:00:03.858156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid8.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid8.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-161c87\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A8FC:324EBE:C9DD21:CCFBD3:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-1449094/1449095\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.548949,VS0,VE199\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fedda7c1a7d0389b5e7609a480560552460b7926\r\ncontent-length: 1449095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1449095,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"0a6f84b4e644de99561aa591b854c6e0","sha1":"db7299fbf4728181f0c45b8d299c19d2ed12e244","sha256":"e8d21c987c48a1400c8f056c726f4cb7aa01e0dceb86e302c12afc796df8c758","sha512":"9ca26b69f256128cb66dda6a4b169c93b910c48476844ff812c82b5610fb52b7b8d79aba91cb200c9d410f1a0af14b1ebcf8316bb371593a210315ca0000ccf1","ssdeep":"24576:kjVxnvWDfgT1UecT8nIcuGJTVkxLqQPF33yB+UKh:kjfnvWQqcnIt+KqQ9Uf+","tlshash":"cd2523ddc74e9682e60121f9ba86470ce726dd64d1f28c0be907b08f2cbb5d50b69bd4","first_seen":"2026-01-08T06:00:03.861347Z","last_seen":"2026-01-08T06:00:03.861347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid10.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid10.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-e088d\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A201:2B4ABF:C6BB4C:C9D9D5:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-919692/919693\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.556171,VS0,VE218\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fb736a7bec5707dd8fca2ab2db3fc0e22829fbb5\r\ncontent-length: 919693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":919693,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f3f254570d3c575b9680f199bbc6dd9a","sha1":"d6d1f64d365c0f00174d97c0aa2058e2dcb82bee","sha256":"d3eb96a1bf770b7bd55aba39b2f31c28e6661d19e182a039e636d5266045e533","sha512":"035c7286d5e9c2fb5ac27840c1a2da89ea6933de5f32db8fe69f85bda87da2582001b137b15b8669678670f2c4220be86ac77affa33ef59a45e730931856f285","ssdeep":"24576:WZKJuLqrd/qlR7q9lxUgRP2BdaCR6ysDtbNgU3aT2yBz:MKQqrdh7ym2BUCAyqxqPF","tlshash":"b51523ea97741418cbe706b0a4f76b817ff2d7e58048876bb4edb08634a41b31d926f4","first_seen":"2026-01-08T06:00:03.863673Z","last_seen":"2026-01-08T06:00:03.863673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T05:59:27.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6910cec4-a5c\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E405:335CF4:CC1FED:CF4766:695F47BC\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.042041,VS0,VE132\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4d0d5d2e875ae9fea7e0296280f655625833f859\r\ncontent-length: 950\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2652,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1eaad63cc2e015cb42207192bce1c6b1","sha1":"c1a51448c308f87ea9344a05aee1eaed5e0ba1b4","sha256":"2db5fd36ccf4a9f1a25083ddb63936fe3d7b36d5601b1ed857c6abc0d6d7c3a1","sha512":"bc0fe46585e01488f24fcef3e5fb45c7eb9015bae68c72129ae70319007845f629b8d22cb10516eaba08b53baf6814750bea2d74850d7686ed9c41afd4ac5160","ssdeep":"","tlshash":"7651a375e4eaa273600104eb7e2395c62ac8da2241995e027bfec7c62f60b0fc95359c","first_seen":"2026-01-08T06:00:03.865979Z","last_seen":"2026-01-08T06:00:03.865979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":107,"dns":44,"connect":26,"send":0,"wait":159,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%201.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%201.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-c3e2\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 457A:2B4ABF:C6BB35:C9D9C3:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.429489,VS0,VE161\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 78c3d6b4ddd6dead1aecd58c60fc9ed7bd76be90\r\ncontent-length: 50146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":50146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 660x880, components 3","md5":"344bb6d22c4aaf496583b1a6194cfcb0","sha1":"2e7dea35fee17fb5338cd492564a53b6001c4128","sha256":"08236f6df07852ad53772ab8f46c2e2810b6bd7226166d3fd230252825dd3cdb","sha512":"a6961722b47ca54629076f4cc6ac15e7c204161c1d1c29b415010939c1e07992280b399550751ff4ee050f5e1c7ca3cb0f97c4b6250d22171cd3d13987fcdb2c","ssdeep":"768:/8C7wxYRpqY0nDtRKIFB6bq3JJFXUlyKKS6BubA/mejAtQAl4UWxWMjK2SwA0n:/8InaY0n7B6bq3JIKpt/Du+kMuIl","tlshash":"a03301e1cea5e70ef88da2f61dff4d438f519070cb2c9e4990256f3614327a726605ab","first_seen":"2026-01-08T06:00:03.867925Z","last_seen":"2026-01-08T06:00:03.867925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%205%20.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%205%20.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-abe3\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 58CE:10F2EF:C5AFC0:C8D489:695F47BC\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.432655,VS0,VE129\r\nvary: Accept-Encoding\r\nx-fastly-request-id: efb458b51f6a0c253a446f4f97b2aec98d2b3d3d\r\ncontent-length: 44003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":44003,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 563x751, components 3","md5":"612a422b825215765e2316c699c05c42","sha1":"02ecbd47932b56a4d2e0ae28fdb6db9ad1cca353","sha256":"b0a4400b69732f1158132d57fd61fc2490c9802ab655d88c96c1e9a0f2abb528","sha512":"6d6e871febfcd0b6c9a09c8883eb15b0a2ae0dcf8475f565ec29b86fd02bdf6147a750885ab2dda628815c607d168bb7e8389bd87e158ffe3e12c39b6c6c9d82","ssdeep":"768:/83m4whPlp6GSn3+GS/uJ/0/sXbfb9BveMyAm/0Tfm3GZCyJbZDdl81B:/83YL69n3+lmJYsjRnrm/0rmS9JbVd+X","tlshash":"281301538d82a535e435797bc597c69833a0cf5ba91667060ec5e12d0fa3331ebe4327","first_seen":"2026-01-08T06:00:03.87219Z","last_seen":"2026-01-08T06:00:03.87219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid3.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid3.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-8a81a\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4582:265067:CC4675:CF6E21:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-567321/567322\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.546368,VS0,VE187\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a285e97ff8fcf69e18c404a2375dbe74b516498d\r\ncontent-length: 567322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":567322,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"52beae4c121a05875fb3a16a65a942c7","sha1":"50e59e9df1578f6c05e3de62fd022a11ea7fee09","sha256":"7419a13094f6541973ab826e3402902eb56d3b4a5cd99196a98bd9f5f7cee489","sha512":"5c4843ab8add9e878c549c4963addba760377a2b553aa71a84090a64f298698518b808c7193fd5dcb05fd7942f361e4180a9ff690361fb4ac77c813c333f1102","ssdeep":"12288:NsrDpWvD4UfjeIC/mp10r6/cuJyuIQ7a8BtCz/A/AJ0:NQUvDpaOLH/cGyuHG+CTA4e","tlshash":"9cc423fc26473164e3b489f7c8b76bd5e27395a46b0d03e02868113a63f86fa6f75401","first_seen":"2026-01-08T06:00:03.875409Z","last_seen":"2026-01-08T06:00:03.875409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%209.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%209.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-c463\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A626:1B2FFA:C8F3E2:CC1AFE:695F47BF\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.435183,VS0,VE140\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 0aaf4ef8d9ab80dcbbd2451e59306fe25b054e92\r\ncontent-length: 50275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 660x880, components 3","md5":"a2465b29585e06d4ec4b16eab051fd36","sha1":"e0b16acaf048ce35d04f242d0d2159a587276d87","sha256":"e697f8d9bc34a6cd26d69dbc9d6404e65b341a3bee4784fc5ed9c06a92ce03bc","sha512":"c0bfd57c69f45d95c937d889ec230e687ef7fcff025843a345c5ff7126e4c1dd8680b6d3678d55ac35761e02a36b4baea112ba868baa53779d7d22d2830443c8","ssdeep":"1536:/8hAuQDpTwYj7BmcYZJMgKKsBkychfRl7:Espjlm3ZJMgKKQkyc/1","tlshash":"8b33f1f1759fff1cc5dc0fe94e15c19653db0d26aa0bb119e2b234aa9180b285d271f4","first_seen":"2026-01-08T06:00:03.877995Z","last_seen":"2026-01-08T06:00:03.877995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%2012.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%2012.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-b9a0\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 58EA:1EB5B5:C5E7F6:C90E40:695F47BA\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.455030,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d65e6c6990bae31dc31eab39ca52366593b4955d\r\ncontent-length: 47520\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":47520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 660x880, components 3","md5":"a8b90dbf59ea7db9433d07e10e6a1fdf","sha1":"91e2b5195c18fb128a96e7a510c7df1be7a9c602","sha256":"10453911d21f93531628675adf1dead5efb4e36aa90d4fe7bb6667ebb0fb30ae","sha512":"cbdab7023304ef11c574f7d14d1aed4b36432f784562c1135f4acfb49ba6e442c30a7b11be726c0be4ec419bd4a357e9eb716b8ef38916c8c9003d1769393919","ssdeep":"768:/87Ux+2/j9vikXOUMY1UCENl3tl9eikhOWdgqZIDe8begkH2KMiEEPDM:/8QcyjJik+UMEUCENdtSiyCqZMeNaxiM","tlshash":"4e23f128d32dd440c2f8c23123b3067948e5e592ab9d79b14a1196c866ddf68cb7bcbd","first_seen":"2026-01-08T06:00:03.881749Z","last_seen":"2026-01-08T06:00:03.881749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid4.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid4.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-2c5d1\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7A7E:2CB35C:C85A6C:CB80AC:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-181712/181713\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.546951,VS0,VE205\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b25e391d01d1b3421a31026f86b5617aea5283e0\r\ncontent-length: 181713\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":181713,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"194d929176cad3eb52e331a17f67be8b","sha1":"db2ed586e582e8f71c7ea3c2594e7bad19c7829d","sha256":"18090cfd6582bea43eb98b165606638bb2ddc72c6a3ccca01f5fb1f26ddd6db7","sha512":"fc9536f7c9a57b73111d018a4ad5946bf65cb133b684d5613de4646f90737ed4fca2411d6efa3595b22f885094efce925b8c90ac96c81063142e7c17f0ac292e","ssdeep":"3072:i5USyeny7LySVDbwg1x5dqOhWja9VxrHy0PleTwZ/8YHAg+oY+w:ivy0y72SVD51xTqYWjaJrH/l0Ww","tlshash":"1b040261f33c800ae1d680736995ba58be76f37846028bd78ea1e3247a955bcac107cd","first_seen":"2026-01-08T06:00:03.88776Z","last_seen":"2026-01-08T06:00:03.88776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid5.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid5.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-23179e\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: CC19:1CC626:C3714C:C6966E:695F47B7\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-2299805/2299806\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.547470,VS0,VE361\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 57ea83aa4a6ff152a9af17159312d634050a86c0\r\ncontent-length: 2299806\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2299806,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"900a9e98a9b833da449784729973c4be","sha1":"7d6571e3a427f12657e7489019646036764e4933","sha256":"e5feb7e4278d875f8d2cc5930e3cc804605f87d2d0c7a97a836b9a055ba8baa0","sha512":"5bdd61426f1b2ec88c0fef3cd8c982541c211c2fd4c888c3707bdae146df5f3cb2cde8b1434e03939d079d6faeff14815f6bf9b5cd95d2cf79710c41df149e06","ssdeep":"24576:DhBzY6j2MJgNN6nbVvEWN1eLpOs91eN2nGnwYprgL:9BFgeb1EcS0s7egnGwYprgL","tlshash":"0a25125d0fc6ef6dcfe000f888a547a8ff22dec469b0a6ef495e419019a60d51bf49d8","first_seen":"2026-01-08T06:00:03.890729Z","last_seen":"2026-01-08T06:00:03.890729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid12.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid12.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-11f23a\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3660:322428:C8628C:CB8920:695F47BB\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-1176121/1176122\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.558437,VS0,VE275\r\nvary: Accept-Encoding\r\nx-fastly-request-id: e06a7df6320d73551c1d48fe832efca1fb040d20\r\ncontent-length: 1176122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1176122,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3bb184c86cfb0fd1b0b5952aaf59f570","sha1":"f96446662a49e5f3d2d16b6ed3531de6c4bc07f1","sha256":"2cf18d0a09d0329311f5b427de5febd1eed47ce03c690e9159bd041270abae9e","sha512":"a280cd81e70826a7270ed575ae53e33baaf0fa3a628b1064d3abd2eb6ea12f2098f3571898ee3a78841481fcd529e4d5bf817a744a930c11504e1cc9946e8f13","ssdeep":"12288:DZKl0Joe6ELxeqJIVmhnhcl077p9UZNK4oPcvqkvfL2WrwY6gPZgeCsX6hS8nnug:Dol0eA3hi0Hov/SQYDga2k1anuR","tlshash":"002523d227bbe143c706d13c21865e6dfe478912f134c994419efa72bd3a5ed2e81e82","first_seen":"2026-01-08T06:00:03.894994Z","last_seen":"2026-01-08T06:00:03.894994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/favicon.ico","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:29.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 58E2:11DE38:C2E0E6:C605BC:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:29 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.197333,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 11406a6b6912b00f3aa68279f1be4a0592ef23df\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-07-21T21:47:03.803856Z","times_seen":18587,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/style.css","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6910cec4-ce1\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 58D6:11DE38:C2E080:C6055C:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.428873,VS0,VE152\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5f58563f9ed91782ab9264dfc8b28465d146c7d9\r\ncontent-length: 1178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3297,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b1a64923158c915829bcc2a45d1420c3","sha1":"bdcfd916d59617a3126a7afb16353a65a0e9f7ff","sha256":"2e1def1b837956c4c519794d8a316601344bda36901f537a050b66397e41abca","sha512":"1497a84963770c7d5eb0e64f6ffe6352e0a90c6e6264ce185e7a0f57bd18f7aac30588a982b36cca494b936a862e05d355313c452c721aa1510df2c554b76de1","ssdeep":"","tlshash":"a86142705b9422047467d1b47463c74577adc048ab4fc87cbfd93084af46196a573bc5","first_seen":"2026-01-08T06:00:03.902598Z","last_seen":"2026-01-08T06:00:03.902598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%208.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%208.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-b5bc\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: ED56:11DE38:C2E081:C6055E:695F47B9\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.434482,VS0,VE170\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 1fad7516f1e4bd0ad0b51836ad2f8db11d3c2281\r\ncontent-length: 46524\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":46524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 660x880, components 3","md5":"5ae7ae8ca2db3704a9550192b8b2252c","sha1":"ae098cc937f7395d36b4779c88930a1dc1694e1f","sha256":"65c0b4d4545ee0a1977ae9f3658ab834f72894c496a94c182e621bb55b2e9090","sha512":"008449b49c83fbbbff11c8112afb0479cf115698bc59e0ba4f31a52d4446726d08211ebe21b8f35f8744c7258da781f5b3c1dcb6c1d9b2035c1328b3f4840e63","ssdeep":"768:/8SsvZB7I4N1QNppgv1wq18fFGjjNHkH4zOAXz03x/L4KGPDek:/8Ssv84N1Q9B4EYaAjGN4f9","tlshash":"3823f2af3a3add08c5549d77901f8f05e6639a84ecc4c07a23df419115e53f188a4abf","first_seen":"2026-01-08T06:00:03.90511Z","last_seen":"2026-01-08T06:00:03.90511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid1.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid1.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-12601a\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A205:324EBE:C9DD20:CCFBD2:695F47BA\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-1204249/1204250\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.545159,VS0,VE287\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 21475b1f4cd53bafc1eab85f19acf9c3cfbdf90d\r\ncontent-length: 1204250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1204250,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"8810f7022d34695259bdb20a53e2f234","sha1":"74f42249b6cd18b9d3fcf601507503670a2daecd","sha256":"d3b5f1ad2da528b7fabd33631575ede0cc2a42ecf1197ada42cad8aa77368f1d","sha512":"ecda0a0855d060cc03b23221d894f027f87991cc918155db1ea0afcad02b22b7002932f98595ffb62afee4ca9a6e3bd7c82048e1fecf3843f8146c6a49e6f4a9","ssdeep":"24576:opKO6jz40zb2ZCYncJPfvYXxxZppwGZjMxkMRgcc:opKDbyfkP38peGZjM+Mmcc","tlshash":"4f252301df5baacde540a0f9c1cc6a11771fe869822756ff8e84206680fb7277f2b584","first_seen":"2026-01-08T06:00:03.908542Z","last_seen":"2026-01-08T06:00:03.908542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%203%20.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%203%20.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-f3c8\"\r\nexpires: Thu, 08 Jan 2026 06:09:15 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: HIT\r\nx-github-request-id: A201:2B4ABF:C6BB35:C9D9C4:695F47BF\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.430861,VS0,VE125\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9b2ddaae8fd5942666e1ff3787d4e26f0f1ffe59\r\ncontent-length: 62408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":62408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1080, components 3","md5":"49449ede000837b826e8479d15128bc6","sha1":"dea3e227f197ce4e693782bc5db643ccc9cb28b8","sha256":"b7d30b6c700aa7f1b5c49b209fa8613aca6d0588dd929bfae058b7a2c1bfca11","sha512":"a7cec062f2f19e11ae69546b9ba04a2d2af78feed6c38704f3a149b90b8e819365fa409487b77c48c0e5e4aa8103b8ab15c4dbcef794352684f13a076e4c7ed7","ssdeep":"1536:/8fUPEkEMkZeRw3SXV3d9CrAa7Wmi5kxIuKnNSPJTW+38+Ucs:EMkZ+0KBD8AuWmiqxNq6gZ5cs","tlshash":"5d531284859109aaff412b73bd880b6148588d3119e324cbeb7eca931d5c133adfe4ed","first_seen":"2026-01-08T06:00:03.911003Z","last_seen":"2026-01-08T06:00:03.911003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%207.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%207.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-9e0c\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: ED70:265067:CC4664:CF6E11:695F47BD\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.434015,VS0,VE154\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 1a75709455f3fe50379ace770e40f183ada10f20\r\ncontent-length: 40460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x853, components 3","md5":"aa2765906acb4b333e532b95759ef081","sha1":"75312629d2db954bc87373ca5d157f7e11fcd03e","sha256":"13835aa9f58a35e8cec44215d51cd4176354e78cb0a31d69f5c0453f0596abc0","sha512":"8669119aa58340b2cbe6921a34013dad366290775ea69799aed4a24311703fe205e25a82b40f746a9d400a58bc687b0fa4d525c3b626a99cbf5edd73acda14f7","ssdeep":"768:/81o/frHSjw9e6znOl5M7gecQ+pdaqEdhT0Ey87GjsBin15gVB4KcOVACK:/81onrXnOlu7geaaqEdhT0L87G4MncVO","tlshash":"1b03e1e8f4c18674c8474b3584293a47070c5e85c27146dfdda1175c8fbe96a8ef8ab7","first_seen":"2026-01-08T06:00:03.914683Z","last_seen":"2026-01-08T06:00:03.914683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/script.js","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6910cec4-442\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E3FA:1C0F3A:CD3279:D05236:695F47C0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.455012,VS0,VE140\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 939cae91ac8df9c13b8bfe4ed0c3329963948a38\r\ncontent-length: 547\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e3abd2f5c74b56abade077eb55976478","sha1":"dd0ca3d06b8fe1e1a32926bc0799f31ef251225d","sha256":"e434b10bcffe3d078b2861f48e189792b12440826af712a52c9651b76aff2a32","sha512":"f395cce9d57bec183a4c75ebb4314880cfe13a37b12a5937daea68e98ab6b2c697d635f8ccf5b46d1af86bb632a823342a41df8f7032844139d8ec81a0399356","ssdeep":"","tlshash":"d311d02ab2b4093504fb70b93b4ee60439ed4506b806fec57ddc41510f92d5254fe9fa","first_seen":"2026-01-08T06:00:03.917165Z","last_seen":"2026-01-08T06:00:03.917165Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid2.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid2.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-ab4f3\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A21B:D539B:CCD3F7:D004B9:695F47BA\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-701682/701683\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.545887,VS0,VE164\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 54af710b2eb52aa67102bd5c7d649f1d08bff55b\r\ncontent-length: 701683\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":701683,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"6d82783e0109e69469c59713ee04fbe9","sha1":"9d723835387ef448a0f9013bde9dc1ea8fa55f1d","sha256":"3927083a21d88630f85bacd253ef4a1579b69336aeb0beab1a5b3d6fe3c3d7ef","sha512":"59e34a5e1ef4098772c265d1b25fb327537d4a03b3d1d59e11960fda5f2ab11623dbf346780ecfc325e4db454e31fc6e90ed4809a46175f45cd93077b0c0e730","ssdeep":"12288:H8tGLQ9vK2gvrk+0ajHkkQ5X5byRtv0LFQ4bMfYa5OeVRenkDmERtqfg:H8IyKSl7kCzLTbMwa5V3Pmyqfg","tlshash":"3de423ad536abc15c14a01be11db039d1236aed3c3ded4a1ec6276291b3f2e1d59e0ec","first_seen":"2026-01-08T06:00:03.919785Z","last_seen":"2026-01-08T06:00:03.919785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid6.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid6.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-17453d\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 190C:3406F0:C9854B:CCACC6:695F47B7\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-1525052/1525053\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.547921,VS0,VE286\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9eb82d3d5ce52dee82d121fc2eee02bbeb922264\r\ncontent-length: 1525053\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1525053,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a57dccaa8edbda23cda3b48c86e66d85","sha1":"895caef6cbbdc08b48beee5f14bda2725d45953a","sha256":"d57269f20db703b7f4a7e4792bac1d6932b424d2ce9567e575ca67c3d90dad8c","sha512":"bfca37c6b385981e628eac4fb17e0af9226c73763c3a8b98d06f633cc0891e14e76617e05debcb13c0b3c3738e312391648783e02f987047cb7f64883a94a269","ssdeep":"24576:0Ea30MoxBXqBmf0LaoNu26zxPFq0Njv2Qtf/EvovpKDc/0Mh:1akMoxBX/0LaoR6zxPFpjTtnE+xnh","tlshash":"ad2523ed4be3fbaddbf716b998750345b25ad357058d2eeb068a102805472c0ab47cdc","first_seen":"2026-01-08T06:00:03.923263Z","last_seen":"2026-01-08T06:00:03.923263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid9.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid9.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-15a00\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1907:2C5782:CC8DA4:CFAD0D:695F47B7\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-88575/88576\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.549386,VS0,VE255\r\nvary: Accept-Encoding\r\nx-fastly-request-id: eb3e7c3c6e08f79ab69df4c4b51c228dd93a1e4b\r\ncontent-length: 88576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":88576,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"1e3ab8aa79904a6403301bdac940acd6","sha1":"d650b27cd7f9d5eb9f2de40c7eb02f02550f93a2","sha256":"69579c0ab5151ef4adb0c6b25cc52611035914a1525d90c3cf85f3f8073cdaaf","sha512":"ba8dceca3769a021ded70c17259644be8d4548bd2a270ba6c98066c5dbf3647d18c98ed168cdc9109a5098c64e0566ae788bdf746686c73cacd2c5cdd1e49bcb","ssdeep":"1536:YygEqJqJcwY6ae7LB/mZ0e47jK2zF+PXeJa4cGBcCgcpAdLTof22fldp3:YqqKc+aevBfejPXeZRgcpAJQ22d73","tlshash":"008302df177381b4c088cdf14d9aeb213fc0fe662ae625c7f95b42845e25b83a5c4a64","first_seen":"2026-01-08T06:00:03.931581Z","last_seen":"2026-01-08T06:00:03.931581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/Drake%20-%20Hold%20On,%20We're%20Going%20Home.mp3","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /Drake%20-%20Hold%20On,%20We're%20Going%20Home.mp3 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: audio/mp3\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-89b0dc\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 190B:265067:CC4674:CF6E20:695F47B7\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-9023707/9023708\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.544777,VS0,VE415\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a26aa1637c23d70ff27f43c1b17a56bbe5af1b35\r\ncontent-length: 9023708\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo","md5":"212356356ddb475eb9c94cacc3db85d4","sha1":"876bcfa1653a37998a3d4730bc63b2357586caff","sha256":"c7e4054b9130d3b8613a9b1ecdb43ad5d15dcd5cecb5db1afe3d82b2974c03be","sha512":"01caf4d0b1ab7eb00ab941784ccac25bea503d99ed3c92de8cb3cf2b6097810ce5066e41f8d11ddc3f2d44d1b9f32ba1728703e88825d8b6b0b894454a94b5c5","ssdeep":"12288:VsboMrXNgN8tOAyFGPtd6zgMAL8/170oqh+N9upRjx2Sqa2fZpNh5zDo1/:V4XksOnFYHky8/16+N9qRjx2BNrwZ","tlshash":"5ff4234657ecf20de2acce316ffe1616a4537e722ab16fd504047d663833228ea159b3","first_seen":"2026-01-08T06:00:03.939005Z","last_seen":"2026-01-08T06:00:03.939005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%204.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%204.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-df95\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: C5F3:113EBC:CCB208:CFDA17:695F47C0\r\naccept-ranges: bytes\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.431721,VS0,VE135\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8b99bee2037476490a49d86924b9f8cf4a78405a\r\ncontent-length: 57237\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":57237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 562x1034, components 3","md5":"50bfad9644f784a5255e92f384c51903","sha1":"0c188e37abbcbf1438dec100b08809c21f177f5c","sha256":"fe57307a1b30ca45f836260e45062e555c28846cebae418e980fe4536b40d550","sha512":"4cb57b7dbfc86a90d136f54beb2c5439cfc8c9eb2c5c15c98d6ef78db02d984caa97406fb46630d366d1aadf37012d16cff6bce18ab3af40c67779aa37ba6c38","ssdeep":"1536:/8XAJ+oXvYCSlmZ/plctrapyKsO+mQB5fj76vD4ufvx42uhV5311k6A:Fj/oOplcttKsOq7oD4uTO06A","tlshash":"2643f20362cfaec7a918ae3604b9fb46b9c412709d4913ba18b95c366be39e507e1531","first_seen":"2026-01-08T06:00:03.94192Z","last_seen":"2026-01-08T06:00:03.94192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/photo%206%20.jpg","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /photo%206%20.jpg HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-134fa\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3653:1EB5B5:C5E7F5:C90E3F:695F47C0\r\naccept-ranges: bytes\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851968.433216,VS0,VE172\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5d733d197f77811f7f0557c3282cfddc24259a33\r\ncontent-length: 79098\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":79098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1080, components 3","md5":"afba005ef571aecafd1f99d436046bda","sha1":"20de01dcb5378598c7227e58721444e634be8e7e","sha256":"d9acd9735ffed65025a6da117f3a62675dbf797a835ce74c99779f8ea692f75c","sha512":"781638b2924fe7a7ef6254f3f6f38b7bd6fadd1e1122a8d69ca6492bf681ceb01b342614c3711915f6b55247477c0fcf81d975ce80e2f7d8371b1d69009de92b","ssdeep":"1536:/8dWxGD8INEScW8CN+V/XKF+h8nka5JD2ekP4AwR6a/TmMGYzt:6d8INJc/j/XKF88frHH/TtGYJ","tlshash":"c9731256cbec6aeec868b7b638fc7a13e03405297b8354c6a5cf06e0cc967e4542859d","first_seen":"2026-01-08T06:00:03.943642Z","last_seen":"2026-01-08T06:00:03.943642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galie.space/vid%2011.mp4","fqdn":"galie.space","domain":"galie.space","tld":"space"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://galie.space/","date":"2026-01-08T05:59:28.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galie.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 16:24:58 GMT","end":"Sat, 07 Feb 2026 16:24:57 GMT"},"fingerprint":{"sha1":"93:7E:01:93:05:44:2D:AE:4E:33:BD:79:9A:9F:7A:23:54:23:5A:09","sha256":"D5:CD:B3:1D:40:4D:48:0E:E8:F6:FA:DC:D2:2B:8E:98:2B:AF:5A:86:6F:14:51:FB:73:AF:9A:45:B4:D8:AA:A2"}}},"request":{"raw":"GET /vid%2011.mp4 HTTP/1.1\r\nHost: galie.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galie.space/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: GitHub.com\r\ncontent-type: video/mp4\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 09 Nov 2025 17:26:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6910cec4-228de3\"\r\nexpires: Thu, 08 Jan 2026 06:09:28 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: CC11:2CB35C:C85A6E:CB80AF:695F47B7\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-range: bytes 0-2264546/2264547\r\ndate: Thu, 08 Jan 2026 05:59:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767851969.557661,VS0,VE338\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c32fd3a5d6735d199287ea16f2faeebae62354f2\r\ncontent-length: 2264547\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2264547,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87e524a43ec8b0e1e2c88620455c4f44","sha1":"337e676a579e0c06ad45388cbe953b96b0baafe0","sha256":"31571cdeedfc2f53d8f60aed8a44c328dffcb4404cd339ea0648abf85bc3f1a8","sha512":"0fafa51593695db56f1433eaf1799128a5ef5bda9918813560a3f435b64c987427c9a504c927ef45b64eb60c8df39534c98bb727bbdbfed27ae3d8c28e9fb150","ssdeep":"12288:YPOLGDJj9sSg6ptvrz8MspLRXlPAUYoNr6BlkrkD3+LSyLQFvkZ06p4uREeKTMDR:lIl9sSgur6PAUKMrkDuTLqsZ0Q2Mg6S4","tlshash":"bc2533b8ab38927bfc0731f6cd0844b9394839a0fe6aed37613e9df50cd95524361216","first_seen":"2026-01-08T06:00:03.947922Z","last_seen":"2026-01-08T06:00:03.947922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"galie.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}