{"report_id":"4500f9d9-c9eb-4148-a601-bb575a4725fb","version":6,"status":"done","tags":[],"date":"2026-05-06T18:26:52Z","url":{"schema":"https","addr":"aevoxyz.pages.dev","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aevoxyz.pages.dev/","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"title":"Aevo • Aevo","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T19:49:33.547358Z","times_seen":17677276,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aevoxyz.pages.dev","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T18:26:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-06T18:26:28Z","timestamp":1778091988,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52314,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-06T18:26:28.627527+0000\",\"flow_id\":2128755574466044,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":52314,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"aevoxyz.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":919,\"bytes_toclient\":3535,\"start\":\"2026-05-06T18:26:28.615932+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-06","alert":"Hunting_JS_WebAssembly","trigger":"aevoxyz.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"aevoxyz.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-06T18:26:53.435545Z","last_seen":"2026-05-06T18:26:53.435546Z","alert_count":1,"request_count":10,"received_data":1842377,"sent_data":4856,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.aevo.xyz","ip":{"addr":"66.33.60.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-19","domain_rank":0,"first_seen":"2022-09-26T04:38:01Z","last_seen":"2026-04-06T19:46:04.836988Z","alert_count":0,"request_count":1,"received_data":14476,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aevoxyz.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac0b555a38bd5700555adbdeaa83435a","sha1":"b0512b73aa87405c650634035b3a906d6e0110f0","sha256":"4c93e3b7db3ea2ebbdd2197a147671b378fee32358e2b73a083bbb05609b7cfe","sha512":"d90f5b2f1659bb34ef1ad45dd9d813af67b9f3fa54b120fa97eb03efc5a78bc18478a680eb7c0645ee01ce60deaa2b06bd2577458a981817d313c01337f8398d","ssdeep":"24576:flXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJIZ4V6UUx+lsUh+jAD3:xjBXpyI6yQo7ebCNt0eTLtD3","tlshash":"ea652335eb0b3ebdcf78a27bd2471f0e3eb04e63841ad4e9d6a460d7825de810a49c55","size":1411425,"data":"","first_seen":"2025-06-23T18:33:07.114302Z","last_seen":"2026-05-06T18:26:56.201502Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-06","alert":"Hunting_JS_WebAssembly","trigger":"aevoxyz.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aevoxyz.pages.dev/BananaGrotesk-Light.otf","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /BananaGrotesk-Light.otf HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEV1p%2FlZrrmDwuM%2FDyfE4kQBa0gbXfpKwGx8Js78HlLeMygMc6DFtP4k4jn8OjCEJsod69Xurx4wT6a%2B0aYEfzVpvRU0GPS%2Fberh5i1aQyuP%2FH9f2BkkVv9%2Bn%2Fxsaeionpusxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6c04373e56ae50eec604c804871412b4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08961b52b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42400,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"834c922d95ca100bd62e1768a89dc6a5","sha1":"34603f05b498e948cde9b91a9feccc63048ace91","sha256":"6ccd9c8cdc3bdbe07c2312970a3746948b29b1b392d34c66f9e84f7add898359","sha512":"3aab03c15f287ade49813df3ac8883e070f596def5a0f568b2863c437bd54153b339582d8d5c2f9e7235496091eacf8fa57fc03f95e28058be1725bcbedaca95","ssdeep":"768:l/sCUDNjKq34HJixRw6wTu339Xu+qbCh04qyOpvrU6BWkM4K/T5sn:FsBDNjypYnwSpWXd3zPgsn","tlshash":"cc136aa7bf016b1ac6e6df35a6aa97a01331fc34ef0e4787f500f2847d85090ae1556e","first_seen":"2026-03-28T10:04:13.028751Z","last_seen":"2026-05-06T18:26:56.182231Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/MNKYBananaGroteskMono-Light-Trial.otf","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /MNKYBananaGroteskMono-Light-Trial.otf HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RSJYEZwVegrop5XueZyqPiNureYrISiFydk1O0iIWWFUQ0l1TClON5o4OLnHGuYrpYx6Z7NZwPZ%2BOQoFmvxsY0o0GcBriLOIQpt8Zsxh8Kx4pC%2BCyF8P36q%2Be1RBj6%2FlE4HCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"736bf6e51ef4ec168122a710f7d507ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08961b5cb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7052,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"911d2c7d79477318b42eb886fd6cb13b","sha1":"04bcbe0731864932d91bcba496b947278a470ff5","sha256":"ac77204ff25aaed54665c174237c4e6923c6dcc335d360956339022ff652ab1e","sha512":"700a4b1deef118d7a2cab051dedab153d2ec1082ae8613bccce69db1e8dff93ae7a31d6428a695f40b9e9358a5398805d93b5933c2f5f25ea7afc3c8fa01f83f","ssdeep":"192:x9wVCPxaPDrILGtCr2FVjNeGhvZ3RSSAhGss:TPqtfjNpZ3RSSfX","tlshash":"ede16c90f3b302c8dafb1a3485eecb4257b6fd0a5db5a78f059087454e826825ec8733","first_seen":"2026-03-28T10:04:13.044602Z","last_seen":"2026-05-06T18:26:56.185585Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/MNKYBananaGroteskMono-Light-Trial.otf","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /MNKYBananaGroteskMono-Light-Trial.otf HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4V1YB%2BpDFIVDFxt1RxCTpw0jN8zVgM2%2BgsssLUdi8jO6vz2h3DKwqbKCJ04bJHHnAFTw8l8I5ppfUTEAssQFCJ09maWgyuBKzII5CSdhN60XyDm88xe9I2rnGkOcJXyJSFKgnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"736bf6e51ef4ec168122a710f7d507ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08961b5fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7052,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"911d2c7d79477318b42eb886fd6cb13b","sha1":"04bcbe0731864932d91bcba496b947278a470ff5","sha256":"ac77204ff25aaed54665c174237c4e6923c6dcc335d360956339022ff652ab1e","sha512":"700a4b1deef118d7a2cab051dedab153d2ec1082ae8613bccce69db1e8dff93ae7a31d6428a695f40b9e9358a5398805d93b5933c2f5f25ea7afc3c8fa01f83f","ssdeep":"192:x9wVCPxaPDrILGtCr2FVjNeGhvZ3RSSAhGss:TPqtfjNpZ3RSSfX","tlshash":"ede16c90f3b302c8dafb1a3485eecb4257b6fd0a5db5a78f059087454e826825ec8733","first_seen":"2026-03-28T10:04:13.044602Z","last_seen":"2026-05-06T18:26:56.185585Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.aevo.xyz/assets/logo/favicon-ios.png","fqdn":"app.aevo.xyz","domain":"aevo.xyz","tld":"xyz"},"ip":{"addr":"66.33.60.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.aevo.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:53:09 GMT","end":"Sat, 11 Jul 2026 00:53:08 GMT"},"fingerprint":{"sha1":"73:57:FC:BA:3D:54:5E:2B:41:31:48:03:B3:4B:20:20:A2:8C:15:5D","sha256":"6F:E9:AA:0C:1A:E5:BF:06:EA:08:C2:17:29:AB:0C:9D:78:99:92:CE:FC:EE:ED:DD:7B:88:57:59:C5:98:EB:66"}}},"request":{"raw":"GET /assets/logo/favicon-ios.png HTTP/1.1\r\nHost: app.aevo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 699447\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon-ios.png\"\r\ncontent-security-policy: frame-ancestors 'self'; worker-src 'self' blob:;\r\ncontent-type: image/png\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\netag: \"8f198612863a857d8e1e13a2607d1a9e\"\r\nlast-modified: Tue, 28 Apr 2026 16:09:02 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bhvrd-1778091989662-ae30b799ac93\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 13747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8f198612863a857d8e1e13a2607d1a9e","sha1":"67ba8279f2a3e1f75523cddee3c2cdd738849537","sha256":"0330a57c8be20efa3d138a694ee6a806d872ad560ae34116b8ea0ba9b10a2daa","sha512":"8fc76e6b8cb17fa2b5875bfac8da33e0dee8b4900520dd9d3cfc40816aaf88f656d8c6ac199c1868fd3070131bfa2a6744f246ece684da0c93ab4eae1e03c795","ssdeep":"192:nSWR/CtlbBzJMIXGuk7JzD80erpVLC5hSxV2qx+rVfiT8s3Ha3bExLBj2vTB1S:SJtl1u7elVLC5hS7pxY3ssbM9o7S","tlshash":"0452cf0bd80940c3ef65e4ba26e7b037d7f50a1e8e1b26c4c9c9d334b99a6f06741869","first_seen":"2026-03-28T10:04:13.031975Z","last_seen":"2026-05-06T18:26:56.18887Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":84,"connect":1,"send":0,"wait":17,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/favicon-dark.svg","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /favicon-dark.svg HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUANwU7Ip9DneexGu8%2BiDuUKzm2MNce66uazAcoZQhdFS9alJ72TP1yTAzmHC75ycSO5tRpWbEQNyH15OUs6PMOAaug9JoofsEzhI1YWHYzmQpCflpGhtVGqOQTTY4sDH2fU5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1e1119de0f2bac73cb3b21ef3c16c5f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a0896ac0fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3469,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02eee7eac7cdf20d3e167af9fcdf08c0","sha1":"791e500c5b3c6826fc4ab5b07a1f92c91a43b910","sha256":"9a368dbf6a25612829fa6c5da4133c834c63ba567f03eb80293eb2a46c14e9d9","sha512":"543b49f2394437cfbd27effff335f5a6f8a691c9beb73d85abc8c270c597ec7bc8375d4a90e6672f38ac31670e0fa60c098015501b78e5dd74636711042276dd","ssdeep":"","tlshash":"776164c53b3a83b8b804f7fc8a2a84557e4b18def5808135c7646c55c977059ac9b8f2","first_seen":"2026-03-28T10:04:13.036814Z","last_seen":"2026-05-06T18:26:56.192477Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/main.d5289b2f.css","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /main.d5289b2f.css HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZEtdLaEIWJMFM9DqRua16lezPHn76tRTlm%2FQYov5fahUE2mq0JcnhqHQbAlwShU%2Br2u5z2SKro1S5M%2FYtQASpbd15%2FT5eQv1WaLyfrombFFuspYJE%2FiUsk5jW%2BvmFsZXV63bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"afc91832ec8ae12ac1392a21a84ff957\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08935fd8b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230373,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"90f0d962171c6a5b5aa5205d82e6336a","sha1":"df8fd9aee78e38d17462d6ab9cbe5721c94e9b93","sha256":"aa86557bd38c7606e223dbe218dc8aa4833a8693d96f5e4fecae2f77d9d1b087","sha512":"bc5fc0151e060c421a56ae3d6f2256a1b79b04fbaba07cd685b26ba8ce80e063111efa15fc1cb90a74868fb06712cc760a77ff67817a103ab4faab0be1cdf836","ssdeep":"1536:CnL+9QfHDvo7OP1BBeVPz1sYCnkzTKlqEpje60I4DnZoPm:CnL+9QfGVPzM+TKlqEpje60I4DnZoPm","tlshash":"b23472d6f5903179aca781499681fefd896f6585cb110eaaf003776807cabd30963ecc","first_seen":"2026-05-06T18:26:56.195721Z","last_seen":"2026-05-06T18:26:56.195721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/index_1.html","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-length: 0\r\nlocation: /index_1\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3jdCB%2BF1nmXr2ETqs7QQz4S4%2BfM7xWCf8uWKYNfKqxFZSLwfJcvLFqQdukUdGVfh9LxB%2BqapnezLD%2FVJEDfrVHcI%2BPvMom6jrIGxhBYRABkikvcB%2Bbl6fesxFsYQphN96v0wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f7a0895db10b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e55a42ecd9cc73d47dd997f2eb0e15a4","sha1":"a1d2928890949cb6030d9b9defe8d9d503737a9c","sha256":"71983609a2f1c1b9810da3e94ac674a43c78228cc63287e82f282af6e148306e","sha512":"c667ab5d482e9593c795f851eb5858b29ee22989f67975c80f7d7608f94393895d87785373006f78fb2a73b06ae15211576d003484fb944756c94b84e4d93430","ssdeep":"","tlshash":"bec09b55d4b11c5a1860de708755f1c48900d55351515d457a5d63509f5ca21c907445","first_seen":"2025-06-23T18:33:07.115242Z","last_seen":"2026-05-06T18:26:56.197537Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/index_1","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /index_1 HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXV2%2BTbjpZzyr7JZsTdrTcOoRaK8aLGZK6M2Ax5GKwA%2BALiXjEAsoQozjGsAiQnPICLZOf8mRaUy5SLJpDP14VXG5p7xbsvFLhiYtBekOg6mCXkQj0SfK1%2FYtyKDLVgIikmT4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a0895fb30b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e55a42ecd9cc73d47dd997f2eb0e15a4","sha1":"a1d2928890949cb6030d9b9defe8d9d503737a9c","sha256":"71983609a2f1c1b9810da3e94ac674a43c78228cc63287e82f282af6e148306e","sha512":"c667ab5d482e9593c795f851eb5858b29ee22989f67975c80f7d7608f94393895d87785373006f78fb2a73b06ae15211576d003484fb944756c94b84e4d93430","ssdeep":"","tlshash":"bec09b55d4b11c5a1860de708755f1c48900d55351515d457a5d63509f5ca21c907445","first_seen":"2025-06-23T18:33:07.115242Z","last_seen":"2026-05-06T18:26:56.197537Z","times_seen":9,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T18:26:28.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 18:26:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ArZt1fQgeJjaznH9VQh1orJk%2Fiq84yLXvDZS6xO2FJdP3Mo3z4oGqDHC2Q9GJJmpY10y4nZuYrnhM%2BLZHVVnjPCelBplJ5QE79caDgxaBTaYqCCiNsMPQ01mJqfbge0Ipa%2F1w%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08910a130b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (352)","md5":"58fea94e04797d110fd61922d9c00720","sha1":"d95aa743611d0465d710b74eda8695ee15fff2ec","sha256":"4a24d68ccae1a2d5dffacc49d4eecbe7b0d790dbc26c182799932e6f443e37cc","sha512":"552c870b92ccdcf702a0dc138d758a5410361ae9350d6d54961b5e9495bdb6cd63bd11a00d3798885a57bce8f94786fc96b812fc6d45a79f5b1dd45c9db1de61","ssdeep":"768:CORqH9PE4ZOPCR6HxxhxT+ARtyfYRv6pUUR0sliaK2cVQmzivr1am01QCFQXH0m:lRqdPE4bR6HxcAiSv6l+PTzi0nFQkm","tlshash":"e9931be753403198b10fdb94e5a2330f636ba023d7459a7973ed1994cfce8580aebac5","first_seen":"2026-05-06T18:26:56.19819Z","last_seen":"2026-06-11T02:41:20.234353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":50,"dns":31,"connect":1,"send":0,"wait":172,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /2ab5d871ffbcee3b5a5b9.js HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mo8fsIMuJUiaE%2FPZi8C4qWdQORW6dUw0wh1msCL64JOKJ50qiWjGzDcCG7OyW4DKvgJi3a3x5iAAl8L7AD3Yr8wpI7bnDaPye1Vsk0xU%2FEe8LZ43smnfqn4kSBixpLne8yOTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"344a608910759bd46a3469cb758c23e2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08935fd5b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1411425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63705)","md5":"927017aa3f5027d31ea452b79b65405d","sha1":"9fb5483557a45acdbff0e5b28d7deabad4236093","sha256":"d05ead3da6dca8e23bf5c829c7be1e12ef15bb6c98fd72e4bd714cc221f278ca","sha512":"df2b5c69c452d0a62981739b64a2e20f3f77585a6b8c248f183bf4964c1f5fa5e46b1a38ddb0411859d313dbfbc6fcc1e7e2c5cce94dfc7d27f6ea47b7edf88a","ssdeep":"24576:flXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJIZ4K:xjBXpyI6yQo7ebCNt0eK","tlshash":"cb252339ef133efecb68d63ad28b1f0e3ca409235859d4edda9860d6c15ad80499ec45","first_seen":"2026-04-25T16:23:23.519531Z","last_seen":"2026-05-06T18:26:56.19958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-06","alert":"Hunting_JS_WebAssembly","trigger":"aevoxyz.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"aevoxyz.pages.dev/BananaGrotesk-Light.otf","fqdn":"aevoxyz.pages.dev","domain":"aevoxyz.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aevoxyz.pages.dev/","date":"2026-05-06T18:26:29.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aevoxyz.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 06:00:24 GMT","end":"Mon, 03 Aug 2026 06:57:49 GMT"},"fingerprint":{"sha1":"44:52:65:43:3C:96:B0:CB:7E:40:1F:52:18:F1:F7:64:24:79:7E:70","sha256":"BC:A9:F8:D9:44:B7:9E:5E:75:19:AE:4E:4E:14:6C:FF:0D:DB:9A:09:5C:B1:89:D7:E3:78:7B:03:75:2D:1A:59"}}},"request":{"raw":"GET /BananaGrotesk-Light.otf HTTP/1.1\r\nHost: aevoxyz.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aevoxyz.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 May 2026 18:26:29 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjidMOdKBqJLz1AMhV9nDfofyI2knoP85%2FMXt8BaQh1EYygqYcVhW9%2FnpKcYQxeWT11OperqdA3s3dMufDMLyuZ6x1u7JFpr19ib%2BqDCcVONHHFwDNfRuljBd0nAHeqGz4XSag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6c04373e56ae50eec604c804871412b4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f7a08961b51b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42400,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"834c922d95ca100bd62e1768a89dc6a5","sha1":"34603f05b498e948cde9b91a9feccc63048ace91","sha256":"6ccd9c8cdc3bdbe07c2312970a3746948b29b1b392d34c66f9e84f7add898359","sha512":"3aab03c15f287ade49813df3ac8883e070f596def5a0f568b2863c437bd54153b339582d8d5c2f9e7235496091eacf8fa57fc03f95e28058be1725bcbedaca95","ssdeep":"768:l/sCUDNjKq34HJixRw6wTu339Xu+qbCh04qyOpvrU6BWkM4K/T5sn:FsBDNjypYnwSpWXd3zPgsn","tlshash":"cc136aa7bf016b1ac6e6df35a6aa97a01331fc34ef0e4787f500f2847d85090ae1556e","first_seen":"2026-03-28T10:04:13.028751Z","last_seen":"2026-05-06T18:26:56.182231Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}