Security Scan Report: br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app

Site favicon
Submitted: Sep 27, 2026, 10:50:32 AMCompleted: Sep 27, 2026, 10:52:34 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 92%

5
Risk Score

Fake Nubank page on a vercel.app subdomain harvesting CPF credentials while wearing the bank's brand and copied content — classic phishing clone, not affiliated with Nubank.

Risk Factors (5)
Impersonation of Nubank brand on a domain not owned by Nubank
CPF (national ID / account credential) collection form
Hosted on free shared platform subdomain with unknown creation date
Unranked domain (no Cisco Umbrella reputation) claiming a major bank brand
23 eval() calls indicating dynamic/obfuscated JavaScript
Safety Factors (4)
No threat-intel Indicators of Compromise matched the page or its resources
No native-YARA or kit-roster malware hits
No cross-origin credential exfiltration detected in captured behaviour
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Domain age information unavailable

Details

Page Title

Nubank - Finalmente você no controle do seu dinheiro

Scan Type

public

Domain Name Analysis

The domain 'br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside four consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app/

Page Load Overview

4.70s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:2,550 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking43% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
43%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.13.139Google · CDNUnited States
AS15169Google LLC
2172.67.220.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.97Google · CDNUnited States
AS15169Google LLC
2143.204.181.100Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
220.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
2150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
2184.24.77.55Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
12954--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E643B2C0AC56A5922234394FE77EF2BB1C08145A648C98FDDBEC745E3CCED4DEA9548

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:3l0kTWZP2O411zRP0tTeQ9iV9MshNpCvlWlGkvPJ6CZJ3e4:WMWY19MlewiV/C4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:329207:VwGQdEFKcAMglLJIgxREeVIEiCSBMIJZCURFCYAFdGEiBtOAAANBJKQFAigNLgsG4gkBTMAhM68DAGhEtOACRA5lMQYJiLKs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff2604c3c3830303
Perceptual Hash:b7c286fdada8c890
Difference Hash:44d4dd1317171646
Wavelet Hash:ff7744c3c3838303
Color Hash:#bfd279

Scan History

Scan history not available

Unable to load historical scan data