Security Report: itauu.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/72f2a4f8-74f1-4c15-be28-d1f9b7a27f4b Domain and IP registration (RDAP)/api/v1/rdap/72f2a4f8-74f1-4c15-be28-d1f9b7a27f4b Certificate Transparency/api/v1/ct/itauu.vercel.app How often this domain was scanned/api/v1/domain/stats/itauu.vercel.app Scan history for this domain/api/v1/domain/history/itauu.vercel.app?limit=15

This website contacted 60 IPs in 4 countries across 32 domains to perform 220 HTTP transactions. The main domain is itauu.vercel.app and was registered 31 years ago.

Submitted URL: http://itauu.vercel.app

Effective URL:

https://itauu.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Itaú page on vercel.app impersonates Banco Itaú, captures Agência/Conta/CPF via local API, and is flagged by Safe Browsing and threat intel. Do not enter data.

Risk Factors

Brand impersonation of Itaú on a non-Itaú domain

Credential/account login form with local API endpoint

Google Safe Browsing Social Engineering threat

Threat-intel phishing report on primary domain

Actor-abused cloud hosting infrastructure

JavaScript eval() dynamic code execution

Domain age information unavailable

Details

Page Title

Banco Itaú | Abra sua conta Personnalité no Itaú. Atendimento e benefícios pensados para vocêfrom scan record

Scan Type

public

Domain Name Analysis

You're looking at domain 'itauu.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'itauu'. Its registrable label 'vercel' stretches across 6 characters with two vowels and four consonants. It segments into two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

39.45s

Total Load Time

8.6 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-br

Text Length:3,502 chars

Detector Agreement:80%

Website Classification

Primary Category

blog personal website92% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

92%

finance banking

78%

corporate business

57%

government public service

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
43	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	92.123.12.4Akamai · CDN	Düsseldorf, North Rhine-Westphalia, Germany	AS20940Akamai International B.V.
3	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
3	150.171.109.99Azure · CLOUD	United States	AS8075Microsoft Corporation
3	172.217.208.95Google · CDN	United States	AS15169Google LLC
3	192.178.183.97Google · CDN	United States	AS15169Google LLC
3	150.171.28.10Azure · CLOUD	United States	AS8075Microsoft Corporation
3	104.18.87.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	23.194.190.151Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	13.33.217.187Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
220	60	-	-