ScanMalware.com

Security Scan Report: br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app

Site favicon
Submitted: Oct 4, 2026, 11:53:06 AMCompleted: Oct 4, 2026, 11:54:15 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ff02767c-bb2e-4b12-b039-fb12c0964ea3Domain and IP registration (RDAP)/api/v1/rdap/ff02767c-bb2e-4b12-b039-fb12c0964ea3Certificate Transparency/api/v1/ct/br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.appHow often this domain was scanned/api/v1/domain/stats/br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.appScan history for this domain/api/v1/domain/history/br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app?limit=15

This website contacted 55 IPs in 5 countries across 34 domains to perform 129 HTTP transactions. The main domain is br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app and was registered 30 years ago.

Submitted URL: https://br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app/

AI Security Verdict

Moderate Risk

Confidence: 96%

5
Risk Score

Fake Nubank login page on a random vercel.app subdomain that harvests CPF credentials. Clear brand impersonation and credential phishing — do not enter any data.

Risk Factors (6)
Brand impersonation of Nubank on a non-official domain
Credential collection form harvesting CPF, the Nubank account login identifier
Form action '#' with no legitimate backend — data capture funnel
Obfuscated, randomized hostname on a free hosting platform
IDS HIGH alerts for suspicious polyfill.io domain resolution
Untrusted/unranked domain masquerading as a major financial institution
Safety Factors (3)
Outbound JS contacts are standard analytics/CDN hosts (DoubleClick, Bing, Pinterest, Clarity, Google Analytics)
No JavaScript malware YARA patterns or known phishing-kit roster match
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 10 to 5
Domain age information unavailable

Details

Page Title

Nubank - Finalmente você no controle do seu dinheiro

Scan Type

public

Domain Name Analysis

Domain 'br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng'. The core label 'vercel' covers 6 characters holding 2 vowels versus 4 consonants. Splitting it apart reveals 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://br-2421-e33d1fb574e7ab7ede884f69e0b147de-p4rfo63nt-acq-ui-eng.vercel.app/

Page Load Overview

6.42s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:2,550 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking43% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
43%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2164.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.20.102Google · CDNUnited States
AS15169Google LLC
2104.21.62.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2143.204.181.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
220.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
2150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
2184.24.77.152Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2142.251.153.119Google · CDNUnited States
AS15169Google LLC
12955--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17C643B2C0AC56A5922234394FE77EF2B71C08145A648C98FDDBEC745E3CCEE4DEA9548

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:3EOkkTWZP2O411zRP0tTeQ9iV9MshNpCvlWlGkvPJ6CZJ3TR:SMWY19MlewiV/nR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:329658:9gQgYFoACEuEXwgRIY4QTgAgRFJNBjCGJECZCyoA6BHpqgTlZwiGMtjdHRk2MYClIYbQh5AHcEQIiASwABKWCO2wBAJUaYwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff6604c3c3830303
Perceptual Hash:b7d286fdad88c882
Difference Hash:44d4dd1317171646
Wavelet Hash:ff7744c3c3838303
Color Hash:#c3c587

Other Hashes

Crop Resistant:44d4dd1317171646,aab2b6b0b20ba2b4,78fefefefafab635,974b0b131b1b1b1f,54d41b13171f1646

Scan History

Scan history not available

Unable to load historical scan data