Paleon Site 7 — Hostile Scanner Resilience Target

Dedicated Subdomain Architecture for External Scanner Validation. Not for production use.

Passive Resilience Test Target: Paleon does not crawl links. Every hostile stimulus is hosted on its own dedicated subdomain where every path emits the stimulus.

Dedicated Subdomains

Subdomain Stimulus / Test Resilience ID
imds.paleon-lab-hostile.comRedirect to EC2 IMDS metadataSSRF-002
fargate.paleon-lab-hostile.comRedirect to Fargate metadataSSRF-001
rfc1918.paleon-lab-hostile.comRedirect to RFC1918 private IPv4SSRF-003
loopback.paleon-lab-hostile.comRedirect to 127.0.0.1SSRF-004
ipv6.paleon-lab-hostile.comRedirect to [fd00::1] (ULA)SSRF-004
redirect-loop.paleon-lab-hostile.com3-cycle redirect chainSAFE-002
self-loop.paleon-lab-hostile.comRedirect to itselfSAFE-002
large-body.paleon-lab-hostile.comStreaming 10MB body (max 20MB)SAFE-003
slow-body.paleon-lab-hostile.comDelayed chunk streamingSAFE-003
gzip-body.paleon-lab-hostile.comGzip bomb (~10KB → ~10MB)SAFE-003
observer.paleon-lab-hostile.comRead-only passive observer (all methods 200)SAFE-005
kill-test.paleon-lab-hostile.comConnection hold for 15s then closesSAFE-006
ftp-redirect.paleon-lab-hostile.comRedirect to FTP URL on rebind-testSAFE-008
slow-drip.paleon-lab-hostile.com1 byte every 10s up to 10 minutesSAFE-009
slow-tls.paleon-lab-hostile.comDelayed TLS handshake (port 9997)SAFE-010-TLS
malformed-http.paleon-lab-hostile.comRaw malformed HTTP framing (port 9999)SAFE-004
malformed-tls.paleon-lab-hostile.comRaw garbled ServerHello (port 9998)SAFE-004-TLS
offscope-redirect.paleon-lab-hostile.comRedirect to separate off-scope domainSAFE-001
rebind-test.paleon-lab-hostile.comAuthoritative DNS rebinding (port 53)SAFE-007