airevolution.dev - suspicious URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned airevolution.dev and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 216.150.1.129 on Vercel, Inc in US. The domain was registered 253 days ago through Name.com, Inc.. 3 domains and 2 IPs were contacted, over 27 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 33) · Confidence 39%
- Scanned URL:
https://airevolution.dev/ - Domain: airevolution.dev · IP: 216.150.1.129 · AS16509 · US
- Server: Vercel
- Page title: AI Revolution
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Name.com, Inc. · domain age 253 days · created 2025-12-09
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 17 20: · subject CN=airevolution.dev
- HTTP requests captured: 27 · outgoing links: 5
- Scan tier: standard · observed 2026-08-20 04:36:17 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates revolut (combosquat)
- Certificate issued < 48h ago
Detected technologies
- Vercel
- Next.js
Contacted infrastructure
- 216.150.1.129 - AS16509 Vercel, Inc (United States)
Observed indicators
- airevolution.dev
- gkbipciso4g0l0uv.public.blob.vercel-storage.com
- github.com
- 216.150.1.129
- 13.238.105.1
- https://airevolution.dev/
- https://airevolution.dev/_next/static/media/797e433ab948586e-s.p.479bea2b.woff2
- https://airevolution.dev/_next/static/media/caa3a2e1cccd8315-s.p.3b6cae6d.woff2
- https://airevolution.dev/_next/static/chunks/a579acc5adcfa0d9.css?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/889649f60458869e.css?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/414e77373f8ff61c.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/112f346e31f991df.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/4fe39d260395829e.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/f45fe7e0453ef6c2.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/turbopack-687f7c998c056611.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/42879de7b8087bc9.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/0c6932420e96e619.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://airevolution.dev/_next/static/chunks/c9e112b5b577a76a.js?dpl=dpl_8VXFqisMoqBc2VwxvohqmLkvPE3f
- https://gkbipciso4g0l0uv.public.blob.vercel-storage.com/
- https://github.com/
Questions about airevolution.dev
- Is airevolution.dev safe?
- No. MalwareAnalyzer scanned airevolution.dev on 20 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was airevolution.dev checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of airevolution.dev
Scanned on MalwareAnalyzer by Cyble · Open interactive scan