Phishing detection: itauu.vercel.app
Itaú Screenshot
Screenshot captured by urlscan.io on 2026-09-20T07:00 UTC: our own render of this page came back blank.
Investigate
Domain
itauu.vercel.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
216.198.79.131
ipinfo
Greynoise
URL
http://itauu.vercel.app
Phishunt analysis Beta
42
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.9 Young certificate
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.3 Long domain
- +0.2 External scripts
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Itau bank phishing page deployed on Vercel PaaS targeting Brazilian banking customers. Google Safe Browsing flags it as social engineering. Served from Amazon infrastructure in the US, far from its claimed Brazilian bank identity.
Google Safe BrowsingOpenPhishPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-03 · confidence 90%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
WR1
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists