What is the VibeCheck scanner?
VibeCheck scans only an origin whose owner published a proof and consented. The checks are read-only, and each request names VibeCheck.
This server has not published an abuse email yet. Use the contact page, put abuse report in the subject, and include the time and the URL.
When does VibeCheck scan a site?
A scan starts only after that account publishes an ownership proof for the origin and checks the consent box. The proof is a token in DNS TXT or at /.well-known/vibecheck-verify.txt.
The app stores who consented, when, the target origin, and the proof method. The operator can export that record when answering an abuse report.
What does a scan send?
Requests use GET, HEAD, OPTIONS, and small POST bodies. The worker does not send PUT, PATCH, or DELETE. Each request carries a User-Agent that names VibeCheck and links to this page.
Checks wait for a free slot on that host instead of firing all at once. Waiting does not skip a check. The render of one page can still load that page's own images and scripts together.
How do I report abuse?
Email the abuse address shown on this page. Include the time in UTC, the URL that was requested, and the source IP address if you have it.
The operator looks up that host and can reply with the account, the time, the target, and whether ownership was shown by DNS TXT or the well-known file.