# aeoncore.xyz browser verification failure page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/aeoncore.xyz/
Machine-readable companion: https://phishdestroy.io/domain/aeoncore.xyz/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-31 18:30:37 UTC
- Last availability or vendor check: 2026-10-31 18:30:37 UTC
- Stored record updated: 2026-10-31 19:45:05 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 216.150.1.65
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-26 12:41:07 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a19339-9ab0-71df-8fcf-a2fd527c1241/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/aeoncore.xyz
- Certificate Transparency search: https://crt.sh/?q=%25.aeoncore.xyz
- Web Archive lookup: https://web.archive.org/web/*/https://aeoncore.xyz/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records that aeoncore.xyz returned a Vercel Security Checkpoint browser verification failure instead of the described site content.

The captured aeoncore.xyz page shows a Vercel Security Checkpoint screen stating "Failed to verify your browser" with "Code 11" beneath it, so no site content or interaction was reachable. The page offers no controls beyond this verification message, and the stored meta description describing a collective of five AI entities on Robinhood Chain conflicts with what the capture actually displays.

The stored VirusTotal domain result reports 1 detection out of 92 engines. alphaMountain.ai reported "malicious".
Package revision: 7af0fd0fda2a4fb97758fe1eb951ab32e01b3d663289cacfb01e99332430cc8b
Text generated (not scan time): 2026-10-31 19:33:11
Reviewed evidence snapshot: {"domain":"aeoncore.xyz","screenshot_available":true,"original_meta_description":"A collective of five AI entities on Robinhood Chain, publishing a daily public record of research, strategy, risk and memory.","initial_ai_description":"The site presents itself as a 'protocol' and prompts users to 'CONNECT WALLET', which is a common tactic used by crypto-drainers to gain unauthorized access to cryptocurrency wallets. The mention of 'Built on Robinhood Chain' is also suspicious as Robinhood does not have its own blockchain.","metadata_observed_on":"2026-10-31","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-28","flagging_vendors":["alphaMountain.ai"],"vendor_labels":{"alphaMountain.ai":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. alphaMountain.ai reported \"malicious\".","page_paragraph_target_characters":535}
Source facts (timestamps as stored): {"record_id":1722607,"first_recorded_at":"2026-10-31 19:30:37","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"alphaMountain.ai":"malicious"},"observed_at":"2026-10-28T08:14:37Z","checked_at":"2026-10-31 19:30:57","fetched_at":"2026-10-31T18:30:55Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai"],"observed_at":"2026-10-28 08:14:37","checked_at":"2026-10-31 19:30:57","fetched_at":"2026-10-31 18:30:57","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 19:30:57"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-31 20:30:15"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-31 19:30:37"}}

## Stored page captures

- Primary capture: https://i.ibb.co/9DY0hrd/92ca759956d6.png
  Captured: 2026-10-31 18:30:37 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a19339-9ab0-71df-8fcf-a2fd527c1241.png
  Captured: 2026-10-31 18:30:37 UTC
  Source report: https://urlscan.io/result/01a19339-9ab0-71df-8fcf-a2fd527c1241/
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17af1-455c-72ce-8fb1-a88348cfee01.png
  Captured: 2026-10-27 01:20:12 UTC
  Source report: https://urlscan.io/result/01a17af1-455c-72ce-8fb1-a88348cfee01/
  SHA-256: c18131d72c78207727ec7003aa47beb38375ba5c535667e994c689f49ff2dc1f
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a19329-f26a-73c6-8a84-0e270998e1e8.png
  Captured: 2026-10-31 18:13:02 UTC
  Source report: https://urlscan.io/result/01a19329-f26a-73c6-8a84-0e270998e1e8/
  SHA-256: e47af3be4c6d2c998ecf2711888ecf3d78ccabb8e22b7f020e3d5b887acee056
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a19334-f2db-76ae-874e-74506011efa9.png
  Captured: 2026-10-31 18:25:03 UTC
  Source report: https://urlscan.io/result/01a19334-f2db-76ae-874e-74506011efa9/
  SHA-256: d8c8b7fee9cb0b2e9cb1f2d31be7cd330f8e61b9b1f1a36616c5a3bf48faf5e7
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a19337-c9e9-732f-973e-a2a24ab6abd5.png
  Captured: 2026-10-31 18:28:09 UTC
  Source report: https://urlscan.io/result/01a19337-c9e9-732f-973e-a2a24ab6abd5/
  SHA-256: 3744298d484047c5476f65c1abe6b9d953f67a3bff8cba46ee62665c4170a0c9
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ee1bd71f-3074-4d73-a4c0-622a8e4d91f6.png
  Captured: 2026-10-31 18:31:37 UTC
  Source report: https://radar.cloudflare.com/scan/ee1bd71f-3074-4d73-a4c0-622a8e4d91f6
  SHA-256: 2b7c4c690f317ee9fc54e7d457792f614fba43911b060ee79fff64e6486e83aa

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-31T18:32:14Z",
        "uuid": "01a19339-9ab0-71df-8fcf-a2fd527c1241",
        "scanned_at": "2026-10-31T18:30:10Z",
        "final_url": "https://aeoncore.xyz/",
        "status": 200,
        "ip": "216.150.16.193",
        "ips": [
            "216.150.16.193"
        ],
        "asns": [
            "16509"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "x.com"
        ],
        "social": [
            "https://x.com/aeoncorexyz"
        ],
        "doc_hash": "cffe894cc7b126792a55a1b303601d5fa2d9d56ab7ba75f976479254e7037128",
        "script_hashes": [
            "7c0be00bfd43494dcddc8817168e952d9900555c3e80355686a423eedd2bab22",
            "e1d4feb378b6ba6cfc1f31809ecdc03b14b8e0759bbe0065de29fb6646b277a2",
            "0632b0b91e5a5750ceb5accd7112ad582ef1f68df04bfe5d247f51e175c2f6e3",
            "de130dc353fcd7541fdfa818069fb5a567a500ae558d903730a35d0cb86fa59f",
            "8bbb58cbfd4633c1d828c6bc37bc32abc768a149c01b1dfc4f5131fd81274551",
            "3b791a323e638fefce920735010ae6b6b1a527b12c4a6402e6dd978a56364f67",
            "723e487ce75a09179f0a3254f214fbf29234199a080df1f4109934e1afdee23c",
            "48be939d65f239b667a675a6d1117198d52eecd6b752a2127114b275ff9cf24d",
            "55f6a51605eb5f752f037697427b391e32c775f3b25f318841c45b2fd53b0f28",
            "45a8d44ab19dc2a66a860118c154be1a8b4cfd38d0918c9ebf77ff8d07314154"
        ],
        "globals": [
            "TURBOPACK",
            "__next_f",
            "NEXT_DEPLOYMENT_ID",
            "next",
            "__webpack_hash__",
            "$RT",
            "$RS",
            "$RB",
            "$RV",
            "$RC"
        ],
        "tls": {
            "san": [
                "*.aeoncore.xyz",
                "aeoncore.xyz"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR2",
            "subject": "*.aeoncore.xyz",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-24T13:11:56Z",
            "valid_from": "2026-10-26T13:11:57Z"
        },
        "domain_age_days": 562,
        "apex_age_days": 562,
        "tls_age_days": 5,
        "tls_valid_days": 89,
        "requests": 25,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 68,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "Next.js",
            "strict-transport-security": "max-age=63072000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-31T18:58:12Z",
        "uuid": "ee1bd71f-3074-4d73-a4c0-622a8e4d91f6",
        "scanned_at": "2026-10-31T18:31:37Z",
        "final_url": "https://aeoncore.xyz/",
        "status": 200,
        "history": [
            {
                "url": "https://aeoncore.xyz/",
                "status": 200
            }
        ],
        "dom_hash": "fff84b9c653cc41f5fa5095c35e1c994c2b2cc37329acd1ac96d994c4464eb92",
        "doc_hash": "cffe894cc7b126792a55a1b303601d5fa2d9d56ab7ba75f976479254e7037128",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "aeoncore.xyz",
                "type": "A",
                "value": "216.150.1.1"
            },
            {
                "name": "aeoncore.xyz",
                "type": "A",
                "value": "216.150.1.193"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.43",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-26T13:41:07Z",
            "updated": "2026-10-31T13:43:34Z",
            "expires": "2027-10-26T23:59:59Z",
            "nameservers": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-31T18:30:55Z",
        "analysis_at": "2026-10-28T08:14:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 57,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 34
        },
        "detections": {
            "alphaMountain.ai": "malicious"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Malicious, Newly Registered (alphaMountain.ai)"
        },
        "created": "2025-04-16T00:00:00Z",
        "updated": "2026-04-17T00:00:00Z",
        "first_seen": "2025-04-17T02:39:16Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "hostmaster.nsone.net",
                "value": "ns1.vercel-dns.com"
            },
            {
                "ttl": 60,
                "type": "CAA",
                "value": "sectigo.com"
            },
            {
                "ttl": 60,
                "type": "CAA",
                "value": "letsencrypt.org"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "216.150.1.193"
            },
            {
                "ttl": 60,
                "type": "CAA",
                "value": "pki.goog"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.vercel-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.vercel-dns.com"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "216.150.16.1"
            }
        ],
        "dns_at": "2026-10-28T08:18:56Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "*.aeoncore.xyz",
                "aeoncore.xyz"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "5fb4fe2a0bef8f44479131990edad199d48",
            "sha256": "b2085558ebeae26f9b26290f5a24360b5942d77136987f99f9af202d624b29ad",
            "subject": "*.aeoncore.xyz",
            "valid_to": "2027-01-24T13:11:56Z",
            "valid_from": "2026-10-26T13:11:57Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "renew period",
                "client hold"
            ],
            "events": {
                "last changed": "2026-04-16T04:40:34Z",
                "registration": "2025-04-16T00:00:00Z",
                "registrar expiration": "2026-04-16T00:00:00Z",
                "last update of RDAP database": "2026-04-16T15:39:44Z"
            },
            "registrar": "NameSilo, LLC",
            "registrar_iana_id": "1479"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-31T18:32:52Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "count": 3,
            "domain": "aeoncore.xyz",
            "issuers": [
                "pki.goog",
                "sectigo.com",
                "letsencrypt.org"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2025-07-11T02:45:25Z",
            "first": "2025-07-11T02:45:25Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 7714
        },
        "social_tags": {
            "title": "AEON Protocol — Five minds. One shared direction.",
            "description": "A collective of five AI entities on Robinhood Chain, publishing a daily public record of research, strategy, risk and memory."
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 9,
                "tls": 15,
                "wait": 138,
                "connect": 5,
                "download": 14044
            },
            "response_ms": 14211
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "198.51.44.13",
                    "host": "ns1.vercel-dns.com"
                },
                {
                    "ip": "198.51.45.13",
                    "host": "ns2.vercel-dns.com"
                }
            ],
            "zone": "aeoncore.xyz"
        },
        "location": {
            "ip": "216.150.1.193",
            "asn": "16509",
            "org": "Amazon.com, Inc.",
            "city": "Los Angeles",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "*.aeoncore.xyz"
        },
        "dns": {
            "A": [
                "216.150.1.1",
                "216.150.1.193"
            ],
            "NS": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ],
            "SOA": "{\"nsname\": \"ns1.vercel-dns.com\", \"hostmaster\": \"hostmaster.nsone.net\", \"serial\": 1793023788, \"refresh\": 43200, \"retry\": 7200, \"expire\": 1209600, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "216.150.1.193",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://aeoncore.xyz"
            ]
        },
        "linked_pages": {
            "external": [
                "https://x.com/aeoncorexyz"
            ],
            "external_count": 1,
            "internal_count": 6
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-26T13:41:07Z",
            "updated": "2026-10-31T13:43:34Z",
            "expires": "2027-10-26T23:59:59Z",
            "status": [
                "serverTransferProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientDeleteProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "Next.js",
                "strict-transport-security": "max-age=63072000"
            }
        }
    }
}
```