# PhishDestroy domain threat record: bauducco-promo.vercel.app

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bauducco-promo.vercel.app/
Machine-readable companion: https://phishdestroy.io/domain/bauducco-promo.vercel.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 22:54:06 UTC
- Last availability or vendor check: 2026-10-27 23:06:06 UTC
- Stored record updated: 2026-10-27 23:21:21 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 64.29.17.3
- Registrar in stored WHOIS data: Vercel Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, vercel.app): 2020-01-28 03:03:04 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a165d0-812c-7080-9c13-72d2ff76c904/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bauducco-promo.vercel.app
- Certificate Transparency search: https://crt.sh/?q=%25.bauducco-promo.vercel.app
- Web Archive lookup: https://web.archive.org/web/*/https://bauducco-promo.vercel.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy classified bauducco-promo.vercel.app as a phishing domain after VirusTotal flagged it with 17 malicious detections. The domain was first seen by PhishDestroy on 2026-10-23. The screenshot capture shows a promotional page titled “Delícias Natalinas Premium | Panetones e Chocotones Gourmet 2024” that advertises premium holiday baked goods; no credential‑collection form appears in the capture. An HTTP 200 response was recorded on 2026-10-27.

How the scam works
Phishing sites impersonate trusted brands or seasonal offers to trick visitors into entering personal, login or payment data. In this category attackers rely on holiday‑shopping interest to harvest credentials or financial information through fake checkout or login forms.

Evidence
VirusTotal analysis on 2026-10-22 reported 17 malicious and 1 suspicious detections from 92 engines, with vendors such as ADMINUSLabs, BitDefender and ESET labeling the domain as phishing. Google Safe Browsing checked on 2026-10-22 reported no flag, while urlscan’s engine score marked the URL as malicious (score 94) on 2026-10-23 despite an overall non‑malicious verdict. PhishDestroy’s internal blocklist lists the domain, whereas external lists (Spamhaus DBL, OTX) showed no entries on their respective check dates.

Infrastructure
The recorded IP was 64.29.17.195, which belonged to Amazon’s network in the United States. The TLS certificate observed on 2026-10-23 was a wildcard for *.vercel.app issued by Google Trust Services, valid from 2026-08-29 to 2026-11-27. The domain age was 323 days as of the latest observation, and the HTTP response header identified the server as Vercel.

What to do
Do not submit any personal, login or payment information on the site and verify any Bauducco promotions on the official Bauducco website; if credentials were entered, change the associated passwords and monitor accounts. Defenders should block the exact hostname bauducco-promo.vercel.app in network filters and review logs for connections to the recorded IP 64.29.17.195.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a165d0-812c-7080-9c13-72d2ff76c904/
URLQuery report: https://urlquery.net/report/508528ba-c50e-4b9a-9ad8-5ae017995216
Stored capture screenshot: https://i.ibb.co/Lhnd5rc2/c9a740e854a0.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/508528ba-c50e-4b9a-9ad8-5ae017995216.png
VirusTotal report: https://www.virustotal.com/gui/domain/bauducco-promo.vercel.app
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bauducco-promo.vercel.app
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 02:40:26 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Lhnd5rc2/c9a740e854a0.png
  Captured: 2026-10-22 22:54:06 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a165d0-812c-7080-9c13-72d2ff76c904.png
  Captured: 2026-10-22 22:54:06 UTC
  Source report: https://urlscan.io/result/01a165d0-812c-7080-9c13-72d2ff76c904/
- URLQuery: https://screenshots.phishdestroy.io/uq/508528ba-c50e-4b9a-9ad8-5ae017995216.png
  Captured: 2026-10-25 12:41:10 UTC
  Source report: https://urlquery.net/report/508528ba-c50e-4b9a-9ad8-5ae017995216
  SHA-256: 850718ba90daaf17cf5e4dc8da959f3381caca828e0d078cdca5127879e83f32

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T23:09:35Z",
        "uuid": "01a165d0-812c-7080-9c13-72d2ff76c904",
        "scanned_at": "2026-10-22T22:52:12Z",
        "final_url": "https://bauducco-promo.vercel.app/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bauducco-promo.vercel.app/",
                "from": "http://bauducco-promo.vercel.app/",
                "status": 307
            }
        ],
        "ip": "64.29.17.195",
        "ips": [
            "64.29.17.195"
        ],
        "asns": [
            "16509"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "7bd2468adb3b95e66d79fc540dcf40fdc04c8e0fecfe6c1efd139f22ab27b1f2",
        "script_hashes": [
            "b4f8096d46fb7c46dadd06e1d20ebdf0c89b2eeab076b6eb81dbea192b2ab456",
            "ccf106a1ff7d270a9b6810b2e66e84e7f439563dd94f9635ecafed375336f6e1",
            "d5118fefa4142010e612b13ec55e3a0fd6b71a9b45726cc3723fb81561c4b23a",
            "24db4b1f0b769b27f618b850f58e1a939f61140c3ba43d69cf20103212bd79af",
            "ed7a81b68156d931954549a7af74e02c59a072deabcc159c01a672ef35d06d58",
            "7bfd5c4025bed2d23227f05f71b9bff9b5696c6fb9f57b481344b6a91299c188",
            "bea0a2b47feee096bec608e0dce682c41562661d9530a4274da1b52cbd0f569d",
            "1c73b3df54a31bb8a681360f05e8303402d6acc11992176ad984cb116ad79402",
            "e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e",
            "75b8ed049ee5d3ecc63ab1c7652fb1c5548c5b88528beb954538c9219d303d80"
        ],
        "globals": [
            "TURBOPACK",
            "next",
            "__webpack_hash__",
            "_N_E_STYLE_LOAD",
            "__next_f",
            "vam",
            "va",
            "vaq",
            "vai"
        ],
        "tls": {
            "san": [
                "*.vercel.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WR1",
            "subject": "*.vercel.app",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-27T19:48:08Z",
            "valid_from": "2026-08-29T19:48:09Z"
        },
        "domain_age_days": 323,
        "apex_age_days": 323,
        "tls_age_days": 54,
        "tls_valid_days": 89,
        "requests": 37,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 94,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T23:29:48Z",
        "analysis_at": "2026-10-13T09:39:05Z",
        "stats": {
            "timeout": 0,
            "harmless": 47,
            "malicious": 17,
            "suspicious": 1,
            "undetected": 27
        },
        "detections": {
            "DNS8": "phishing",
            "ESET": "phishing",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "URLQuery": "suspicious",
            "Gridinsoft": "phishing",
            "SafeToOpen": "phishing",
            "ADMINUSLabs": "malicious",
            "BitDefender": "phishing",
            "Criminal IP": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "Tucows Domains Inc",
        "created": "2020-01-28T03:03:04Z",
        "expires": "2026-01-28T03:03:04Z",
        "updated": "2025-01-26T03:25:55Z",
        "first_seen": "2025-12-03T08:51:06Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "64.29.17.131"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "216.198.79.131"
            }
        ],
        "dns_at": "2026-10-13T09:45:29Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "*.vercel.app"
            ],
            "issuer": "Google Trust Services / WR1",
            "serial": "f7911168ffa7d0f4135e24792e7a52a8",
            "sha256": "8f46c4a0a289bfde4060d06986f2af761ee62d668dde972e6bef4687ee4f6093",
            "subject": "*.vercel.app",
            "valid_to": "2026-11-27T19:48:08Z",
            "valid_from": "2026-08-29T19:48:09Z"
        },
        "whois": {
            "registrar": "Tucows Domains Inc",
            "registrar_iana_id": "69",
            "registrar_url": "http://www.tucows.com",
            "created": "2020-01-28T03:03:04Z",
            "updated": "2025-01-26T03:25:55Z",
            "expires": "2026-01-28T03:03:04Z",
            "status": [
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "ns1.vercel-dns-3.com",
                "ns2.vercel-dns-3.com",
                "ns3.vercel-dns-3.com",
                "ns4.vercel-dns-3.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T11:55:48Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "count": 2,
            "domain": "vercel.app",
            "issuers": [
                "letsencrypt.org",
                "pki.goog"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "social_tags": {
            "title": "Delícias Natalinas Premium | Panetones e Chocotones Gourmet 2024",
            "author": "Delícias Natalinas Premium",
            "ogType": "website",
            "ogTitle": "Delícias Natalinas Premium - Panetones e Chocotones Artesanais",
            "keywords": "panetone artesanal, chocotone gourmet, pães especiais, cestas natalinas, produtos premium natal, panetone recheado, chocotone trufado, pães fermentação natural",
            "generator": "Next.js",
            "description": "Explore nossa seleção exclusiva de panetones artesanais e chocotones premium. Produtos selecionados com ingredientes de alta qualidade e fermentação natural. Delivery rápido!",
            "twitterCard": "summary",
            "ogDescription": "Produtos artesanais com fermentação natural e ingredientes selecionados para seu Natal 2024"
        },
        "trackers": {
            "requests": 24
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 21,
                "tls": 34,
                "wait": 34,
                "connect": 6,
                "download": 33
            },
            "response_ms": 128
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 200143,
            "co2_grams": 0.0073,
            "cleaner_than": 7
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "205.251.194.149",
                    "host": "ns2.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.197.116",
                    "host": "ns3.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.199.60",
                    "host": "ns4.vercel-dns-3.com"
                },
                {
                    "ip": "205.251.193.92",
                    "host": "ns1.vercel-dns-3.com"
                }
            ],
            "zone": "vercel.app"
        },
        "location": {
            "ip": "216.198.79.67",
            "asn": "16509",
            "org": "Network Billing Systems",
            "city": "Cleveland",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WR1",
            "subject": "*.vercel.app"
        },
        "dns": {
            "A": [
                "64.29.17.67",
                "216.198.79.67"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "216.198.79.67",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://bauducco-promo.vercel.app"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cart Functionality",
                "Node.js",
                "React",
                "Next.js",
                "Vercel",
                "Vercel Analytics",
                "Priority Hints",
                "HSTS",
                "Webpack",
                "Open Graph"
            ]
        },
        "linked_pages": {
            "internal_count": 1
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload"
            }
        }
    }
}
```