{"report_id":"c23348cc-eb17-458c-b84f-f947c30d4ac7","version":6,"status":"done","tags":[],"date":"2025-10-17T10:13:00Z","url":{"schema":"http","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"title":"Meta Business Support"},"submit":{"url":{"schema":"http","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T10:13:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Facebook, Inc.","trigger":"credit-for-free.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Facebook, Inc.","trigger":"credit-for-free.vercel.app/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"brandlogos.net","ip":{"addr":"104.26.2.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-10","domain_rank":376982,"first_seen":"2015-07-22T14:00:02Z","last_seen":"2025-10-10T14:58:10.887427Z","alert_count":0,"request_count":1,"received_data":36666,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"torro.io","ip":{"addr":"199.60.103.77","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":3823519,"first_seen":"2025-06-29T09:43:29.787132Z","last_seen":"2025-10-10T14:58:10.972108Z","alert_count":0,"request_count":1,"received_data":8128,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"credit-for-free.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-17T03:01:01.869695Z","last_seen":"2025-10-17T03:01:01.869695Z","alert_count":6,"request_count":2,"received_data":10813,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ec370ca0eaf3069dce13df24243d863","sha1":"64c1919bbb18a6d851d1b7772f830320b8ab5cc1","sha256":"6a31a3a39783d09cc53dd9e9baeb4a4fa49be602eef90f6bbb9f78af02688064","sha512":"c24d4cfa5facd73ea7c242f69d6591d785bdbdca73bfc6aa7afe963bf09d4350a4daf0eeeb7ccd482b02d807663cf5d1c6763f0e2e468d8fda9f11213627d49d","ssdeep":"","tlshash":"6290040100513554711530d00134c3dd557df075dc4dd335754f570040c0405c53c401","size":41,"data":"","first_seen":"2023-03-07T01:02:03Z","last_seen":"2026-08-17T21:40:10.128631Z","times_seen":23340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"05b8db03f3cd01ec50c7058d3c0c6117","sha1":"40da6c32a83a1aa163313599495a75f16d8ce783","sha256":"4dc68dd08fa99ab41420a4b67f0fa81d327f7d7e2e97a11dc77a4926fa139c09","sha512":"f4f4694de568447372e7fd3243ed717e047f293678e9aeeac5da25a812dc510795a00123276b6b960a5670a64e52fc0a1c972aa2b2464bd1c9702839dbfc1c75","ssdeep":"","tlshash":"3fe07d412173011499fb02cfc15b03142e74e00a3db6d468308dd6487e73d91c1ef6c8","size":324,"data":"","first_seen":"2025-10-10T14:58:13.137786Z","last_seen":"2025-11-13T10:26:25.889106Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"312351bff07989769097660a56395065","sha1":"004be89dd9e070ecb080b9b759e5be29ec24881b","sha256":"b2b2f104d32c638903e151a9b20d6e27b41d8c0c84cf8458738f83ca2f1dd744","sha512":"454935a0b9fe288a70896e9e0548537ed09c564e47d771b91202f70ddc94946fa6b209e205034983ebe3160633bf5401df01cdfc54b7f98c4bfbd5845a89124f","ssdeep":"","tlshash":"1f3000000000000000cc00000000000000000000000000000000000000000000000c00","size":4,"data":"","first_seen":"2023-03-13T00:05:53Z","last_seen":"2026-06-07T07:17:39.905306Z","times_seen":32226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"brandlogos.net/wp-content/uploads/2021/10/meta_platforms_icon-logo_brandlogos.net_f5zqr.png","fqdn":"brandlogos.net","domain":"brandlogos.net","tld":"net"},"ip":{"addr":"104.26.2.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-for-free.vercel.app/","date":"2025-10-17T10:12:34.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandlogos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 10:39:04 GMT","end":"Sat, 20 Dec 2025 11:38:47 GMT"},"fingerprint":{"sha1":"48:E7:34:92:91:69:22:2E:F5:41:19:52:5D:79:0E:77:E6:1E:F3:42","sha256":"34:B4:AE:B0:43:2D:05:57:52:2F:C7:DC:42:0C:2A:5D:F8:A9:B4:0D:8A:D4:DB:EF:73:71:82:E9:4E:47:E3:3D"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/meta_platforms_icon-logo_brandlogos.net_f5zqr.png HTTP/1.1\r\nHost: brandlogos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://credit-for-free.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 10:12:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 35798\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate\r\ncf-bgj: imgq:85,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=46552\r\netag: \"681e14b5-b5d8\"\r\nexpires: Mon, 03 Nov 2025 15:54:37 GMT\r\nlast-modified: Fri, 09 May 2025 14:44:05 GMT\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 736183\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hep2NzD49Q3ulXRqrHkGcv4XaFgI9fnAMpZTSFZJime8Vy3ynDe%2Fb6RX300W%2FFbhOS%2FnIzMcKGZBrPHE1XLe%2FRNdfXZ2IClJ0mH3\"}]}\r\ncf-ray: 98ff04b41ccf7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35798,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1244 x 826, 8-bit/color RGBA, non-interlaced","md5":"6080e17f0cd2025ffcb315ff5ffde4a9","sha1":"7970a03df1cce5301e37353108c52c5a87d4fef1","sha256":"b4159f2783384adb1d035439ae0959b2e88af68542c743c4110a9542a16573b6","sha512":"bcd6561270f9d7d902dbec7608648e694288df8d975427f713bfdf3f6af671461c5e80ec51184a6ea5d4b3e776df0f1ad629c04e76c19e2bbbb94017504d80f9","ssdeep":"768:m01rA4fLgtKngEwJIM1HLE14gvqXIagxKkJm7p78aewu1jPo:mUzgEAJIMFwkgxlJmBFCjPo","tlshash":"40f2e19198984f2fc81f033b7b392bbb55871ef8555f438a814812729e24c5be4e9ee0","first_seen":"2025-07-19T05:40:54.938149Z","last_seen":"2025-11-13T10:28:41.947437Z","times_seen":103,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":199,"dns":23,"connect":1,"send":0,"wait":15,"receive":3,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torro.io/hs-fs/hubfs/Meta-Verified-Packages-Checkmark.png","fqdn":"torro.io","domain":"torro.io","tld":"io"},"ip":{"addr":"199.60.103.77","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-for-free.vercel.app/","date":"2025-10-17T10:12:34.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torro.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 19:33:11 GMT","end":"Sun, 23 Nov 2025 20:33:09 GMT"},"fingerprint":{"sha1":"98:B6:93:1E:98:EB:0A:82:10:46:BD:3F:5F:9A:25:51:45:90:2A:81","sha256":"A1:41:9E:40:A1:59:B9:7F:CD:C2:CF:A1:2C:12:76:18:38:85:04:BE:18:36:22:64:B8:80:0C:5E:9A:E7:9C:B7"}}},"request":{"raw":"GET /hs-fs/hubfs/Meta-Verified-Packages-Checkmark.png HTTP/1.1\r\nHost: torro.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://credit-for-free.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 10:12:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 6338\r\nserver: cloudflare\r\ncf-ray: 98ff04b47f230b61-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 736184\r\ncache-control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900\r\netag: \"5de9e439c4aa2fc30a3e48583650cc86\"\r\nlast-modified: Thu, 09 May 2024 13:24:38 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 841dfa6074cf4b3b0718988f088a4ac2.cloudfront.net (CloudFront)\r\naccess-control-allow-credentials: false\r\ncache-tag: F-166927770038,P-20778776,FLS-ALL\r\ncf-bgj: imgq:85,h2pri,csam-hash\r\ncf-polished: origSize=7079, status=vary_header_present\r\nedge-cache-tag: F-166927770038,P-20778776,FLS-ALL\r\ntiming-allow-origin: torro.io\r\nx-amz-cf-id: 3_u3sCcux73egbdsqUv7Tb9YGReUz96SOP_BjHqjbhVJZguREwuAWQ==\r\nx-amz-cf-pop: IAD89-C1\r\nx-cache: Miss from cloudfront\r\nx-hs-alternate-content-type: text/plain\r\nx-hs-portal-id: 20778776\r\nx-robots-tag: all\r\nset-cookie: __cf_bm=Yfd84VIqYhzyqFUMiCoYdcJP.QZaOq_yl1AXEPw0PLU-1760695954-1.0.1.1-8T3T6hSSQIqdnCzdKpWHx5aRpUdg72xHXJ2nGhJcd9n8BL1z4SErzRJSdwCP3UdEsuLE2twX0PKke98tDcbiYNrx2ZerjjZHGQmE3LKDTvY; path=/; expires=Fri, 17-Oct-25 10:42:34 GMT; domain=.torro.io; HttpOnly; Secure; SameSite=None\n_cfuvid=_LESNTzixm4ZsXrqfBe.e61vVjrXqq3v0aWYFK6Hb5s-1760695954666-0.0.1.1-604800000; path=/; domain=.torro.io; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QkgvqrcHENS7j3LClKGBVZF1sxSsXb3RLYeXfOp6pgIasWR03UMi4ZQFakg%2FvC4PoSdrJe%2Bya77MVP8k9kyTwCFqMDW0UCaU7fl%2FKwCAnUIF53Fv%2BRiR5a5%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"f5005ed1d475a8c446d807e74fdffb90","sha1":"41f6524b64cb9f2de71f15f5d45f9a08fe22c4d1","sha256":"119c56605b955f2b3e2670c01dddbcf1738cfa5dbc04ddf08019e4b2ee6214f7","sha512":"80791b9f2378e73be25d69122ecaacf638d56c30f85f3bf457eafc299eaf04a236c21ea1f6e62ee7e22cfd1c710b756344c327a9aff6677b187b6f30a7f097d5","ssdeep":"192:rRy1LInMPN0KaxSm8unY2vI6a9dkVi+PG:YVnNeVnYClkdKbG","tlshash":"b5d1af150ff93ed100b1dda22b5912ec77c201cdbaec921d1a9591a2010efdc8cb7af8","first_seen":"2025-06-29T09:43:31.299844Z","last_seen":"2025-11-13T10:28:41.945981Z","times_seen":141,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":258,"dns":60,"connect":1,"send":0,"wait":31,"receive":1,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"credit-for-free.vercel.app/favicon.ico","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://credit-for-free.vercel.app/","date":"2025-10-17T10:12:34.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: credit-for-free.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://credit-for-free.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 107047\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"sub-index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 10:12:34 GMT\r\netag: \"691d80040667a9038fa99e35400ff5cc\"\r\nlast-modified: Thu, 16 Oct 2025 04:28:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9ctjx-1760695954730-960b7830fcca\r\ncontent-length: 2032\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"691d80040667a9038fa99e35400ff5cc","sha1":"d758aa3872403d00ad263e52124dd9a51964f1e9","sha256":"4facc374a7a9d3a76b109eb5dd21d5b16224a4a591c185cc4e01ef96bb65b9b8","sha512":"a6d158615defb5b9a77b891e0a3ba561f2d01471431736263d72d84b0d2f430276213ef09996bbde2a2f8af38df806ca34312934a0f3bd09f958a86da2be2513","ssdeep":"96:cADEG2n+8rwc1WlOw3w8hui4mwExAot4r4SB8IUEWAvhLErTxNFmr:cAYG2n+8rwcglOw3w8hui4mLWot4rpBn","tlshash":"5aa181dbd9975516b95351743bb33b522b64d407928adc903ecca28ccf81e81caa738c","first_seen":"2025-10-10T14:58:13.108784Z","last_seen":"2025-10-23T13:51:17.095205Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Facebook, Inc.","trigger":"credit-for-free.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-for-free.vercel.app/","fqdn":"credit-for-free.vercel.app","domain":"credit-for-free.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T10:12:34.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: credit-for-free.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 8628\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 10:12:34 GMT\r\netag: \"691d80040667a9038fa99e35400ff5cc\"\r\nlast-modified: Fri, 17 Oct 2025 07:48:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9ctjx-1760695954168-98ede58f003f\r\ncontent-length: 2032\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"691d80040667a9038fa99e35400ff5cc","sha1":"d758aa3872403d00ad263e52124dd9a51964f1e9","sha256":"4facc374a7a9d3a76b109eb5dd21d5b16224a4a591c185cc4e01ef96bb65b9b8","sha512":"a6d158615defb5b9a77b891e0a3ba561f2d01471431736263d72d84b0d2f430276213ef09996bbde2a2f8af38df806ca34312934a0f3bd09f958a86da2be2513","ssdeep":"96:cADEG2n+8rwc1WlOw3w8hui4mwExAot4r4SB8IUEWAvhLErTxNFmr:cAYG2n+8rwcglOw3w8hui4mLWot4rpBn","tlshash":"5aa181dbd9975516b95351743bb33b522b64d407928adc903ecca28ccf81e81caa738c","first_seen":"2025-10-10T14:58:13.108784Z","last_seen":"2025-10-23T13:51:17.095205Z","times_seen":8,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":48,"dns":19,"connect":1,"send":0,"wait":10,"receive":10,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Facebook, Inc.","trigger":"credit-for-free.vercel.app/","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"credit-for-free.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}