🌐 nu.co 200 🔒 SSL Valid
Checked: just now 🔗 Visit site
↪
This domain forwards to a specific page: nu.com/us/en (checked 0d ago)
HTTP Status ?A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires ?When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 157d
Domain Expires ?When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
N/A
Hosting ?The company and location where this website's server is physically located.Read more →
Unknown
Security ?Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
3/3
IP Address ?The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
3.170.42.19
Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
N/A
Uptime
N/A
⚡ Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
▼

Performance data not available yet.

🛠️ Tech Stack ?Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools.
▼

No technologies detected

📸 Screenshot
▼

Screenshot not available yet.

🌐 DNS Records ?DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
A (IPv4)3.170.42.1173.170.42.903.170.42.643.170.42.19
NSns-1103.awsdns-09.orgns-1709.awsdns-21.co.ukns-321.awsdns-40.comns-840.awsdns-41.net
MX1 smtp.google.com
TXT (4)
Services configured via TXT:
Google2
+1 other TXT record(s)
Show all TXT records
v=spf1 include:_spf.google.com include:mail.zendesk.com -all
_2xfs6uhnyodndtztswiax75vgtrk0v6
google-site-verification=NWd1gjKoABnupUGXutPi9t4YUFTuzKQL2B5KFxaOaO8
google-site-verification=z1zjdMQ7SUq8vGbcFS2bW4JpgrFk3cGrXx418Q7kZ3M
📋 WHOIS / RDAP ?Public registration data: who registered the domain, when, and when it expires.Read more →
▼
RegistrarN/A
RegisteredN/A
ExpiresN/A
Last UpdatedN/A
🔒 SSL Certificate ?Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
Subject (CN)nu.com
IssuerAmazon
Valid From2026-09-08
Valid Until2027-03-24 (157 days left)
SANs (9)nu.cominvestors.nuinternational.nubank.com.brinvestidores.nunu.cowww.nu.comwww.investors.nuwww.investidores.nuwww.nu.co
📡 HTTP Headers ?Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
Status200
ServerVercel
Content-Typetext/html; charset=utf-8
Final URLhttps://nu.com/us/en
strict-transport-securitymax-age=63072000; includeSubDomains; preload
content-security-policydefault-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://tracking-cdn.figpii.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn-cookieyes.com log.cookieyes.com https://vercel.live/ https://www.clarity.ms https://scripts.clarity.ms https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.datocms-assets.com https://backend.blog.nubank.com.br https://img.youtube.com https://image.mux.com https://www.googletagmanager.com https://flagcdn.com https://cdn-cookieyes.com log.cookieyes.com; font-src 'self' data:; worker-src 'self' blob:; connect-src 'self' https://graphql.datocms.com https://site-api.datocms.com https://www.datocms-assets.com https://backend.blog.nubank.com.br https://webapp-proxy-webhooks.nubank.com.br https://prod-global-webapp-proxy.nubank.com.br https://staging-global-webapp-proxy.nu-stg.net https://tracking-cdn.figpii.com https://www.google.com https://www.google.com.br https://www.google.com.mx https://www.google.com.co https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.googletagmanager.com https://www.recaptcha.net https://img.youtube.com https://*.sentry.io https://*.ingest.sentry.io https://stream.mux.com https://*.stream.mux.com https://*.mux.com https://*.fastly.mux.com https://prod-global-us-marketing-acl.prod-waf.nuapp.us https://prod-global-prometheus-marketing-acl.prod-waf.nu.net https://cdn-cookieyes.com https://*.cookieyes.com https://*.clarity.ms https://c.bing.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://www.google.com https://vercel.live https://challenges.cloudflare.com; media-src 'self' https://stream.mux.com https://www.datocms-assets.com https://videos.files.wordpress.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests
x-frame-optionsSAMEORIGIN
x-content-type-optionsnosniff
referrer-policystrict-origin-when-cross-origin
permissions-policycamera=(), microphone=(), geolocation=(), interest-cohort=()
cache-controls-maxage=31536000
x-cacheHit from cloudfront
via1.1 1a12f863197f986ec10d35ed76e104f0.cloudfront.net (CloudFront)
Security headers ?HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
HSTS
Content-Security-Policy
X-Frame-Options
🏠 Hosting ?Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
IP Address3.170.42.19
ProviderUnknown
OrganizationN/A
ASNN/A
LocationN/A
🛡️ Security Score A (7/7)
▼
Valid SSL
HSTS
CSP
X-Frame-Options
X-Content-Type
Referrer-Policy
Permissions-Policy
🗺️ Sitemap & Robots
▼
No robots.txt
This site has no robots.txt file, so crawlers may access everything by default.
Sitemap Not found
🔗 Social & Meta Tags
▼

No meta tags detected.

📧 Mail Security ?Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
SPF✓ Present
v=spf1 include:_spf.google.com include:mail.zendesk.com -all
DMARC✓ Present
v=DMARC1; p=reject; rua=mailto:[email protected]
MX Records
1 → smtp.google.com
🌍 Other TLDs ?Other top-level domain variants of this domain name and their availability. 14 active 4 for sale 5 available
▼
.com ●
.net taken
.org taken
.info Available
.io ●
.co current
.dev ●
.app ●
.me Available
.biz ●
.eu Available
.xyz ●
.fi ●
.se ●
.de ●
.uk ●
.fr ●
.nl ●
.es Available
.it taken
.us Available
.ca taken
.com.au ●
.co.uk ●
📡 Uptime Monitor
▼

Not checked yet — data will appear after the first monitoring run.