# zara-landing-page-a0.vercel.app: Recorded $750 Zara Gift Card Claim Page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/
Machine-readable companion: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-11 20:04:44 UTC
- Selected availability observation: 2026-11-11T20:04:44Z
- Stored record updated: 2026-11-11 21:00:23 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 216.198.79.131
- Registrar in stored WHOIS data: Vercel Inc.
- Last stored HTTP status: 200 (observed: 2026-11-11T20:04:44Z)
- Registration date (registry RDAP, vercel.app): 2020-01-28 03:03:04 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1cc34-9bd7-7654-a3ca-91b19eccd045/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/zara-landing-page-a0.vercel.app
- Certificate Transparency search: https://crt.sh/?q=%25.zara-landing-page-a0.vercel.app
- Web Archive lookup: https://web.archive.org/web/*/https://zara-landing-page-a0.vercel.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records zara-landing-page-a0.vercel.app as a page offering a $750 Zara Gift Card claim with steps to enter email and complete deals.

On 2026-11-11, zara-landing-page-a0.vercel.app displayed a promotional page headed "Claim Your $750 Zara Gift Card" over an iridescent background, with a black gift card graphic labeled ZARA GIFT CARD. The page lists four steps: click the Get Started button, enter email and basic info, complete 3-5 simple deals, and receive the reward once verified, followed by a Get Started button. Fine print states the offer is available to residents of the United States, United Kingdom, Canada, or Australia and calls the page an independent promotional page not affiliated with, sponsored by, or endorsed by Zara.

The stored VirusTotal domain result reports 0 detections out of 92 engines.
Package revision: 1ac78dd193f3e349ebe6ce3ad04d857bd8d41b53af4c3259a4a605955b9bfc2d
Text generated (not scan time): 2026-11-11 21:10:32
Reviewed evidence snapshot: {"domain":"zara-landing-page-a0.vercel.app","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"zara-landing-page-a0.vercel.app","final_host":"zara-landing-page-a0.vercel.app","redirects":[{"to":"https://zara-landing-page-a0.vercel.app/","from":"http://zara-landing-page-a0.vercel.app/","status":307}],"captured_at":"2026-11-11T20:03:00.136000Z","uuid":"01a1cc34-9bd7-7654-a3ca-91b19eccd045","report_url":"https://urlscan.io/result/01a1cc34-9bd7-7654-a3ca-91b19eccd045/","sha256":"26e30d452d9afce0cabed868087ad0e320193222fa9f546c45cf131f52317430","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The site impersonates Zara by offering a '$750 Zara Gift Card' and uses the Zara brand name and implied association to entice users to 'Get Started' and 'Complete 3-5 Simple Deals' for verification, which is a common tactic for credential theft or lead generation scams. Despite a disclaimer, the primary intent is to leverage the Zara brand for fraudulent purposes.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":0,"engines":92,"malicious":0,"suspicious":0,"analysis_date":"2026-11-11","retrieved_date":"2026-11-11","vendor_labels":[],"flagging_vendors":[]},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":603}
Source facts (timestamps as stored): {"record_id":1925884,"first_recorded_at":"2026-11-11 21:04:44","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-11-11T12:40:07Z","checked_at":null,"fetched_at":"2026-11-11T20:07:26Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-11-11 12:40:07","checked_at":"2026-11-11 21:07:26","fetched_at":"2026-11-11 20:07:26","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":0,"malicious":0,"suspicious":0,"undetected":92}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 21:07:27"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1925884,"scope":"checked_url","observed_at":"2026-11-11T20:04:44Z","http_status":200,"http_observed_at":"2026-11-11T20:04:44Z","stored_http_code":200,"stored_http_observed_at":"2026-11-11T20:04:44Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1cc34-9bd7-7654-a3ca-91b19eccd045.png
  Captured: 2026-11-11 20:03:00 UTC
  Source report: https://urlscan.io/result/01a1cc34-9bd7-7654-a3ca-91b19eccd045/
  SHA-256: 26e30d452d9afce0cabed868087ad0e320193222fa9f546c45cf131f52317430
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/24710fc8-9787-44ab-84de-f21a6bc33617.png
  Captured: 2026-11-11 20:08:27 UTC
  Source report: https://radar.cloudflare.com/scan/24710fc8-9787-44ab-84de-f21a6bc33617
  SHA-256: bb5f6f7196aeb8f5487ab71f33f2296f5538670a5c1f4cee9e10632362a07663

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-11T20:06:13Z",
        "uuid": "01a1cc34-9bd7-7654-a3ca-91b19eccd045",
        "scanned_at": "2026-11-11T20:03:00Z",
        "final_url": "https://zara-landing-page-a0.vercel.app/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://zara-landing-page-a0.vercel.app/",
                "from": "http://zara-landing-page-a0.vercel.app/",
                "status": 307
            }
        ],
        "ip": "64.29.17.195",
        "ips": [
            "64.29.17.195"
        ],
        "asns": [
            "16509"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "linkthem.net"
        ],
        "doc_hash": "9da6918a4128b9de8e7f2e7ddf266f1a62c2411375da3a33a6a7b5137d8bbc1d",
        "script_hashes": [
            "82e707d6fe3a845efd1c19393cd25f63d79d31d4c81e651de91a3f65f44d0608",
            "561778a4b5d7c30d421de4e0e50561d0654f904cdc8962a4b8d9016b61da2a1d",
            "33675810f1ddf7a49704dd7c4c427cda673a2de19c491b4dc004cda16acd0faf",
            "660e72ac8f0013853b0ef4de466695f98572d6dd51ec4af445de36081b327b35",
            "8bbb58cbfd4633c1d828c6bc37bc32abc768a149c01b1dfc4f5131fd81274551",
            "087d42d3c61298934b8624f690563144988ef4ce9a143865be2df6b05327bb44",
            "daa2924c95645a6e857a3fbe0cee069092a1d004ab050325a73ae6bd20609dc1",
            "050e35bf7e6e96590f2a9de114c14ff792806ed28457b3248762944350c0ba4c"
        ],
        "globals": [
            "TURBOPACK",
            "__next_f",
            "next",
            "__webpack_hash__",
            "vam",
            "va",
            "vaq",
            "vai"
        ],
        "tls": {
            "san": [
                "*.vercel.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WR1",
            "subject": "*.vercel.app",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-29T11:46:09Z",
            "valid_from": "2026-10-31T11:46:10Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 11,
        "tls_valid_days": 89,
        "requests": 16,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-2aab354"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "zara"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Zara"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-11T20:50:29Z",
        "uuid": "24710fc8-9787-44ab-84de-f21a6bc33617",
        "scanned_at": "2026-11-11T20:08:27Z",
        "final_url": "https://zara-landing-page-a0.vercel.app/",
        "status": 200,
        "history": [
            {
                "url": "https://zara-landing-page-a0.vercel.app/",
                "status": 200
            }
        ],
        "dom_hash": "a4988a01204cffdad1afbb70af0a354828b9918f7685f44c19e8cc9965337d24",
        "doc_hash": "9da6918a4128b9de8e7f2e7ddf266f1a62c2411375da3a33a6a7b5137d8bbc1d",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "zara-landing-page-a0.vercel.app",
                "type": "A",
                "value": "64.29.17.67"
            },
            {
                "name": "zara-landing-page-a0.vercel.app",
                "type": "A",
                "value": "216.198.79.67"
            }
        ],
        "dnssec_valid": false,
        "ip": "64.29.17.67",
        "whois": {
            "registrar": "Tucows Domains Inc",
            "created": "2020-01-28T03:03:04Z",
            "updated": "2026-03-14T03:03:04Z",
            "expires": "2036-01-28T03:03:04Z",
            "nameservers": [
                "ns1.vercel-dns-3.com",
                "ns2.vercel-dns-3.com",
                "ns3.vercel-dns-3.com",
                "ns4.vercel-dns-3.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-11T20:07:26Z",
        "analysis_at": "2026-11-11T12:40:07Z",
        "stats": {
            "timeout": 0,
            "harmless": 0,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 92
        },
        "reputation": 0,
        "registrar": "Tucows Domains Inc",
        "created": "2020-01-28T03:03:04Z",
        "expires": "2026-01-28T03:03:04Z",
        "updated": "2025-01-26T03:25:55Z",
        "first_seen": "2026-11-11T12:40:09Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "64.29.17.195"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "216.198.79.195"
            }
        ],
        "dns_at": "2026-11-11T12:40:09Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "*.vercel.app"
            ],
            "issuer": "Google Trust Services / WR1",
            "serial": "9c5f0e6a35c955e113044c86848e4cd5",
            "sha256": "b780bccea3104338b0f1dfb618d1613104d80c3ba127e19dc9307f2c9c56dfc4",
            "subject": "*.vercel.app",
            "valid_to": "2027-01-29T11:46:09Z",
            "valid_from": "2026-10-31T11:46:10Z",
            "observed_at": "2026-11-11T12:40:09Z"
        },
        "whois": {
            "registrar": "Tucows Domains Inc",
            "registrar_iana_id": "69",
            "registrar_url": "http://www.tucows.com",
            "created": "2020-01-28T03:03:04Z",
            "updated": "2025-01-26T03:25:55Z",
            "expires": "2026-01-28T03:03:04Z",
            "status": [
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "ns1.vercel-dns-3.com",
                "ns2.vercel-dns-3.com",
                "ns3.vercel-dns-3.com",
                "ns4.vercel-dns-3.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-11T20:09:39Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "count": 2,
            "domain": "vercel.app",
            "issuers": [
                "letsencrypt.org",
                "pki.goog"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "$750 Zara Gift Card",
            "generator": "Deals Dept",
            "themeColor": "#100c17",
            "description": "Explore an independent third-party gift card offer. Review eligibility, privacy details, and reward terms before continuing."
        },
        "trackers": {
            "requests": 11
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 33,
                "tls": 12,
                "wait": 16,
                "connect": 6,
                "download": 1
            },
            "response_ms": 68
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 10403,
            "co2_grams": 0.0004,
            "cleaner_than": 71
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "205.251.194.149",
                    "host": "ns2.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.193.92",
                    "host": "ns1.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.199.60",
                    "host": "ns4.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.197.116",
                    "host": "ns3.vercel-dns-3.com"
                }
            ],
            "zone": "vercel.app"
        },
        "location": {
            "ip": "64.29.17.195",
            "asn": "16509",
            "org": "Amazon.com, Inc.",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WR1",
            "subject": "*.vercel.app"
        },
        "dns": {
            "A": [
                "64.29.17.195",
                "216.198.79.195"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "64.29.17.195",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://zara-landing-page-a0.vercel.app"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Node.js",
                "React",
                "Next.js",
                "Vercel",
                "Vercel Analytics",
                "Priority Hints",
                "HSTS",
                "Webpack"
            ]
        },
        "linked_pages": {
            "external": [
                "https://linkthem.net/"
            ],
            "external_count": 1
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1cc34-9bd7-7654-a3ca-91b19eccd045.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1cc34-9bd7-7654-a3ca-91b19eccd045/","captured_at":"2026-11-11T20:03:00Z","sha256":"26e30d452d9afce0cabed868087ad0e320193222fa9f546c45cf131f52317430","model_image_sha256":"7b6e008a180c00829133bf53781b0a0bda0a6d6bce34bf0ced7fd9660045a64d","available":true,"content_status":null}

## Complete dated records
Availability observations: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/zara-landing-page-a0.vercel.app/records.json?source=content&format=json

## Dated availability observation
Latest stored reachability observation
```json
{
    "state": "alive",
    "label_key": "availability.active",
    "detail_key": "detail.latest_reachability",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1925884,
    "scope": "checked_url",
    "observed_at": "2026-11-11T20:04:44Z",
    "http_status": 200,
    "http_observed_at": "2026-11-11T20:04:44Z",
    "stored_http_code": 200,
    "stored_http_observed_at": "2026-11-11T20:04:44Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "unknown",
    "content_classification_at": null,
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```