ScanMalware.com

Security Scan Report: itauu.vercel.app

Redirected to:
https://itauu.vercel.app/abrir.html
Submitted: Sep 19, 2026, 3:50:11 AMCompleted: Sep 19, 2026, 3:52:22 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f67834c3-0077-4c2c-965b-9b3b38d694aeDomain and IP registration (RDAP)/api/v1/rdap/f67834c3-0077-4c2c-965b-9b3b38d694aeCertificate Transparency/api/v1/ct/itauu.vercel.appHow often this domain was scanned/api/v1/domain/stats/itauu.vercel.appScan history for this domain/api/v1/domain/history/itauu.vercel.app?limit=15

This website contacted 58 IPs in 3 countries across 34 domains to perform 320 HTTP transactions. The main domain is itauu.vercel.app and was registered 31 years ago.

Submitted URL: http://itauu.vercel.app/abrir.html

Effective URL:

https://itauu.vercel.app/abrir.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Itaú account-opening page on itauu.vercel.app impersonating Banco Itaú, harvesting CPF/banking data via a PHP endpoint; Safe Browsing and threat intel both flag it as phishing.

Risk Factors (5)
Lookalike domain itauu.vercel.app imitating Banco Itaú on a free hosting subdomain
Credential/personal-data form (CPF, conta) posting to an off-brand PHP endpoint
Google Safe Browsing Social Engineering threat on the scanned page
Threat-intelligence phishing report on the primary domain
eval() dynamic code execution present in page JavaScript
Domain age information unavailable

Details

Page Title

Banco Itaú | Formulário de abertura de contas

Scan Type

public

Domain Name Analysis

You're looking at domain 'itauu.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'itauu'. The registrable portion 'vercel' spans 6 characters containing two vowels alongside four consonants. Splitting it apart reveals two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://itauu.vercel.app/abrir.html

Page Load Overview

26.63s
Total Load Time
17.5 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-br
Text Length:9,920 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking83% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
83%
blog personal website
83%
corporate business
71%
government public service
48%
adult content
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3564.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
523.50.131.138Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5150.171.110.52Azure · CLOUDUnited States
AS8075Microsoft Corporation
520.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
5150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
52.21.20.146Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
513.33.217.187Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
32058--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C11EF9B3C68C658445211C8F0F0EE0CD02AF218FE50FC5185D841EAB7D0FE52D556AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kS+2cJnvLu0kxVVnWHQ/fCnvLu0SAJnWHQ/fCS88n1JG:vCtGxWw/f0cnw/fFE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1095:AAAAAAAAABAAAAAAAQAAAAABAAAAAAABAAAAAEAAAAAAAAACCECAAAQAIBAgAAAABAAAgAAABAAAAAAAgAggAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffdbf9ffff8fab
Perceptual Hash:dd5913134b1b1e1b
Difference Hash:580232330b2c3c2a
Wavelet Hash:00fe9bf9ffe70000
Color Hash:#ac535f

Other Hashes

Crop Resistant:580232330b2c3c2a

Scan History

Scan history not available

Unable to load historical scan data