Security Scan: Itaú

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f37747a9-817b-40cd-88e1-66317098a0dd Domain and IP registration (RDAP)/api/v1/rdap/f37747a9-817b-40cd-88e1-66317098a0ddHow often this domain was scanned/api/v1/domain/stats/tf-app.vercel.app Scan history for this domain/api/v1/domain/history/tf-app.vercel.app?limit=15

This website contacted 7 IPs in 1 country across 4 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://tf-app.vercel.app

Effective URL:

https://tf-app.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Itaú Empresas banking login on a free vercel.app subdomain, flagged by Safe Browsing for social engineering; it harvests RUT/username and password. Do not enter credentials.

Risk Factors (5)

Brand impersonation of Itaú on a non-official hosting-platform subdomain

Credential collection form (username + password) behind the impersonated bank branding

Google Safe Browsing Social Engineering verdict

IDS alerts for actor-abused cloud hosting service domain (vercel.app) in DNS query and TLS SNI

Unranked, unknown-age shared-hosting tenant inconsistent with a real bank's infrastructure

Domain age information unavailable

Details

Page Title

Itaú

Scan Type

public

Domain Name Analysis

The domain name 'tf-app.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'tf-app'. The core label 'vercel' covers 6 characters holding two vowels versus four consonants. Segmentation suggests 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.36s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:237 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

corporate business57% confidence

Type: webapp

Method: ml+structural

All Detected Categories

corporate business

57%

finance banking

53%

healthcare medical

28%

government public service

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.139.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.94Google · CDN	United States	AS15169Google LLC
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.21.26.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	7	-	-