🌐
nu.com 200
🔒 SSL Valid
HTTP Status A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 158d
Domain Expires When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 1264d
Hosting The company and location where this website's server is physically located.Read more →
Unknown
Security Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
3/3
IP Address The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
3.170.42.64
Performance Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
N/A
Uptime
N/A
Performance Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
▼
Performance data not available yet.
Tech Stack Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 7
▼
📊 Analytics
Google Analytics
Google Tag Manager
Microsoft Clarity
⚙️ Framework
Next.js
☁️ Hosting
AWS
Vercel
⚡ JS Framework
React
Screenshot
Processing...
▼
⏳
Screenshot is being captured...
DNS Records DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
| A (IPv4) | 3.170.42.1173.170.42.903.170.42.193.170.42.64 |
| NS | ns-1103.awsdns-09.orgns-1709.awsdns-21.co.ukns-321.awsdns-40.comns-840.awsdns-41.net |
| MX | 1 smtp.google.com |
| TXT (6) |
Services configured via TXT:
Google3
DocuSign
+1 other TXT record(s)
Show all TXT recordsgoogle-site-verification=lAFUDrZZmL91I1jzPwNg9tj0piEKVxPwgJdV2aOYW5Q v=spf1 include:_spf.nu.com -all _v6qrsdwfnzydt8df1s5vr4vmjdok15u docusign=90c84c67-198d-45f3-8a02-6252bbdc465c google-site-verification=-72OoVKDMaZP1dROOXCKHJBHcFf7JyDbUsKSCpW3CUc google-site-verification=8TBmlGaldLO0u7pJRXiOSjuNfKCKYBYfsdR54psAQdE |
WHOIS / RDAP Public registration data: who registered the domain, when, and when it expires.Read more →
▼
| Registrar | Gandi SAS |
| Registered | 1993-04-02 |
| Expires | 2030-04-03 (in 1264 days) |
| Last Updated | 2026-06-01 |
| Status | client transfer prohibited |
SSL Certificate Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
| Subject (CN) | nu.com |
| Issuer | Amazon |
| Valid From | 2026-09-08 |
| Valid Until | 2027-03-24 (158 days left) |
| SANs (9) | nu.cominvestors.nuinternational.nubank.com.brinvestidores.nunu.cowww.nu.comwww.investors.nuwww.investidores.nuwww.nu.co |
HTTP Headers Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
| Status | 200 |
| Server | Vercel |
| Content-Type | text/html; charset=utf-8 |
| Final URL | https://nu.com/us/en |
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://tracking-cdn.figpii.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://cdn-cookieyes.com log.cookieyes.com https://vercel.live/ https://www.clarity.ms https://scripts.clarity.ms https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.datocms-assets.com https://backend.blog.nubank.com.br https://img.youtube.com https://image.mux.com https://www.googletagmanager.com https://flagcdn.com https://cdn-cookieyes.com log.cookieyes.com; font-src 'self' data:; worker-src 'self' blob:; connect-src 'self' https://graphql.datocms.com https://site-api.datocms.com https://www.datocms-assets.com https://backend.blog.nubank.com.br https://webapp-proxy-webhooks.nubank.com.br https://prod-global-webapp-proxy.nubank.com.br https://staging-global-webapp-proxy.nu-stg.net https://tracking-cdn.figpii.com https://www.google.com https://www.google.com.br https://www.google.com.mx https://www.google.com.co https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.googletagmanager.com https://www.recaptcha.net https://img.youtube.com https://*.sentry.io https://*.ingest.sentry.io https://stream.mux.com https://*.stream.mux.com https://*.mux.com https://*.fastly.mux.com https://prod-global-us-marketing-acl.prod-waf.nuapp.us https://prod-global-prometheus-marketing-acl.prod-waf.nu.net https://cdn-cookieyes.com https://*.cookieyes.com https://*.clarity.ms https://c.bing.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://www.google.com https://vercel.live https://challenges.cloudflare.com; media-src 'self' https://stream.mux.com https://www.datocms-assets.com https://videos.files.wordpress.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), interest-cohort=() |
| cache-control | s-maxage=31536000 |
| x-cache | Hit from cloudfront |
| via | 1.1 6a708dc90d82be1e14d5e74acbc05bbe.cloudfront.net (CloudFront) |
Security headers HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
Hosting Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
| IP Address | 3.170.42.64 |
| Provider | Unknown |
| Organization | N/A |
| ASN | N/A |
| Location | N/A |
Security Score
A (7/7)
▼
Sitemap & Robots
▼
Partially restricted
Some areas are hidden from crawlers, but the main content stays open to search engines.
Areas hidden from crawlers:
Other paths
10
Show raw disallow rules (10)
/global/unsubscribe
/global/newsletter-opt-out
/us/your-rights-regarding-this-debt
/us/debt-collection-notices
/us/unsubscribe
/us/newsletter-opt-out
/us/the-nu-era/terms-and-conditions
/global/invite
/us/invite
/preview
| Sitemap | Found 3 sitemaps (index) pages |
| Last modified | 2026-10-16T17:08:24.108Z |
Social & Meta Tags
Complete
▼
| Title | Nu US: Welcome to the Nu Way of Banking |
| Description | Discover a simpler, more transparent way to manage your money with Nu US. Welcome to the Nu way of banking. |
| OG Title | Nu US: Welcome to the Nu Way of Banking |
| OG Description | Discover a simpler, more transparent way to manage your money with Nu US. Welcome to the Nu way of banking. |
| OG Image | https://www.datocms-assets.com/162099/1787695892-logo-nu.png |
| OG Type | website |
| OG Site Name | Nu US: Welcome to the Nu Way of Banking |
| Twitter Card | summary_large_image |
| Canonical URL | https://nu.com/us/en |
| Language | en |
Mail Security Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
| SPF | ✓ Present v=spf1 include:_spf.nu.com -all |
| DMARC | ✓ Present v=DMARC1; p=reject; rua=mailto:[email protected] |
| MX Records | 1 → smtp.google.com |
Other TLDs Other top-level domain variants of this domain name and their availability. 14 active 4 for sale 5 available
▼
Uptime Monitor
▼
Not checked yet — data will appear after the first monitoring run.