Security Report: www.bancolombbia.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/30eb295e-1d9d-4d90-861d-936ed0bcd581 Domain and IP registration (RDAP)/api/v1/rdap/30eb295e-1d9d-4d90-861d-936ed0bcd581How often this domain was scanned/api/v1/domain/stats/bancolombbia.vercel.app Scan history for this domain/api/v1/domain/history/bancolombbia.vercel.app?limit=15

This website contacted 7 IPs in 2 countries across 4 domains to perform 6 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.bancolombbia.vercel.app/

Effective URL:

https://bancolombbia.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Typosquatted vercel.app page impersonating Bancolombia's online banking with a credential-harvesting login form that ships entered data to a Telegram bot. Definitive phishing.

Risk Factors (5)

Brand impersonation of Bancolombia on a look-alike domain that is not the bank's official site

Credential-collecting login form (password + multiple identity fields) on a free hosting subdomain

Telegram bot exfiltration channel embedded in page JavaScript

Fake multi-step authentication flow mimicking online banking

Instant-publish hosting subdomain with unknown creation date

Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas - Bancolombia

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.bancolombbia.vercel.app' is registered, featuring subdomain 'www.bancolombbia'. The second-level label 'vercel' is 6 characters long containing two vowels alongside 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

> Bancolombia Sucursal Virtual Personas O. Antes de hacer clic, confirma Por tu seguridad, nunca compartas tus claves con nadie. Si no eres tú quien está intentando ingresar, cancela la. transacció...

Page Load Overview

6.08s

Total Load Time

80 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:887 chars

Detector Agreement:75%

Website Classification

Primary Category

education learning85% confidence

Type: static

Method: ml+structural

All Detected Categories

education learning

85%

finance banking

80%

government public service

67%

technology software

52%

cryptocurrency blockchain

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	192.178.183.94Google · CDN	United States	AS15169Google LLC
0	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	7	-	-