# apievangelist-security-probe

What this client asked https://www.pathwren.workers.dev for, from that host's own request log.
Window: 2026-09-01 11:59:36Z to 2026-09-01 11:59:36Z UTC. Generated 2026-09-01.

## User-agent strings, exactly as they arrived

- `Mozilla/5.0 (compatible; apievangelist-security-probe/1.0)` — 3 request(s), 1 address(es), 2026-09-01 11:59:36Z to 2026-09-01 11:59:36Z

- Requests: 3
- Distinct addresses (salted hashes, never published): 1
- Distinct paths: 3
- Visits (30-minute gap rule): 1
- Status codes: 404×3
- Accept headers: none sent
- Our classifier called it: unknown×3 (ours, from the user-agent)

## What it asked for, in order

1. `/trust` — 2026-09-01 11:59:36Z — 404
2. `/security` — 2026-09-01 11:59:36Z — 404
3. `/compliance` — 2026-09-01 11:59:36Z — 404

## What it asked for that did not exist

- `/trust` — 404×1 — first asked 2026-09-01 11:59:36Z; still absent
- `/security` — 404×1 — first asked 2026-09-01 11:59:36Z; still absent
- `/compliance` — 404×1 — first asked 2026-09-01 11:59:36Z; still absent

## Verification

Not observed. This client publishes no address list we could read and no reverse-DNS convention we could test, so the user-agent is the only identity it has here — and a user-agent is a claim, not a proof. Anyone can send this string.

## What it publishes about you

Not observed. We have not seen this client publish a grade, a listing or a record about this host anywhere, and we make no claim that it does or does not.

## Documentation it names

not observed — no URL in its user-agent

JSON: https://www.pathwren.workers.dev/bot/apievangelist-security-probe.json · all clients: https://www.pathwren.workers.dev/data/observed-clients.json