Security Scan: Node2Shell Brotli vuln (CVE-2026-111497) evol

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4af63a79-2594-4b15-ad9b-4d562573b542 Domain and IP registration (RDAP)/api/v1/rdap/4af63a79-2594-4b15-ad9b-4d562573b542How often this domain was scanned/api/v1/domain/stats/aikido.dev Scan history for this domain/api/v1/domain/history/aikido.dev?limit=15

This website contacted 97 IPs in 4 countries across 68 domains to perform 261 HTTP transactions. The main domain is aikido.dev and was registered 4 years 5 months ago.

Submitted URL: https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

The Cisco Umbrella rank of the primary domain is #397,538 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

Risk Score

Legitimate security-vendor blog article about CVE-2026-111497 on its own well-established domain; only form is a HubSpot newsletter signup with no credential or payment fields.

Safety Factors (5)

Established 1629-day-old domain with consistent self-branding

Content is vendor security research/reporting with timelines, patch tables and FAQs

Newsletter form handled by HubSpot (legitimate form backend service)

Third-party scripts all from ranked, well-known analytics/marketing hosts

No credential exfiltration or obfuscated malicious JavaScript detected

Domain age information unavailable

Details

Page Title

Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.

Scan Type

public

Favicon Hash

MMH3: -1699908201

MD5: 84d6defa88726b1ce0f8bd6782dfe34b

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'www.aikido.dev' is registered with subdomain 'www'. The second-level label 'aikido' is 6 characters long holding four vowels versus two consonants. Segmentation suggests 1 word: aikido. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.57s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:42,732 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
69	198.202.211.1Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
2	104.18.160.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	146.75.122.132Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
2	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
2	18.64.181.198Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	34.202.155.136Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
2	104.16.140.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
261	97	-	-