Security Scan: Nubank Ultravioleta

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e3ff1e32-3114-401a-add4-bcd741c246da Domain and IP registration (RDAP)/api/v1/rdap/e3ff1e32-3114-401a-add4-bcd741c246daHow often this domain was scanned/api/v1/domain/stats/downloadhere.vercel.app Scan history for this domain/api/v1/domain/history/downloadhere.vercel.app?limit=15

This website contacted 13 IPs in 2 countries across 7 domains to perform 24 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://downloadhere.vercel.app/

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Page impersonates Nubank Ultravioleta on the unrelated free subdomain downloadhere.vercel.app and asks for a CPF inside a fake eligibility flow. Brand impersonation of a different entity drives HIGH_RISK.

Risk Factors (4)

Impersonation of a different entity's brand (Nubank Ultravioleta) on a non-official domain

Collection of CPF / personal identity data under a bank brand

Deceptive eligibility/'profile analysis' framing typical of phishing funnels

Unranked domain with no reputation for a brand that would normally use an official domain

Domain age information unavailable

Details

Page Title

Nubank Ultravioleta

Scan Type

public

Favicon Hash

MMH3: 1953508465

MD5: 59b7b2af7e220162f43ed5c192beed30

Domain Name Analysis

Domain 'downloadhere.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'downloadhere'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus 4 consonants. Segmentation suggests two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.26s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:451 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking56% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

56%

adult content

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	104.20.17.167Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	184.24.77.57Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	18.217.172.254Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
1	3.41.202.167Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	172.66.166.164Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
24	13	-	-