ScanMalware.com

Security Scan Report: popularclientedo.lat

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/60ac7066-09f7-4efb-ab03-18c7d8db24fbDomain and IP registration (RDAP)/api/v1/rdap/60ac7066-09f7-4efb-ab03-18c7d8db24fbHow often this domain was scanned/api/v1/domain/stats/popularclientedo.latScan history for this domain/api/v1/domain/history/popularclientedo.lat?limit=15
This website contacted 4 IPs in 1 country across 4 domains to perform 21 HTTP transactions. The main domain is popularclientedo.lat and was registered 3 weeks ago.

Submitted URL: https://popularclientedo.lat/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Bancolombia login page on a 1-day-old domain harvesting 'Usuario' and 'Clave del cajero' credentials; Safe Browsing flags social engineering.

Risk Factors (5)
Brand impersonation of Bancolombia on an unrelated domain
Credential harvesting login form (username + password) on a 1-day-old domain
Google Safe Browsing social engineering detection
Single-source threat-intel reports of RAT malware on the host IP:port
No domain reputation or ranking
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas - Bancolombia

Scan Type

public

Domain Name Analysis

The domain name 'popularclientedo.lat' uses the .lat top-level domain. The second-level label 'popularclientedo' is 16 characters long containing 7 vowels alongside 9 consonants. Breaking it apart gives three words: popular, client, edo. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Bancolombia Sucursal Virtual Personas ¡Hola! Ingresa los datos para gestionar tus productos y hacer transacciones. 2 Usuario ¿Olvidaste tu usuario? É) Clave del cajero ¿Olvidaste o bloqueaste tu...

Page Load Overview

1.69s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:528 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning96% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
96%
finance banking
70%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
666.29.148.149United States
AS22612Namecheap, Inc.
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
545.223.60.202Incapsula · WAFUnited States
AS19551Incapsula Inc
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
214--

Detected Technologies3

PHPv8.2.35
40%
Litespeed Cache
40%
LiteSpeed
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12DE2D829B590003B7D53C4E6E695BD58BA2EA1C3EF2A9BF5FD8C41009FC6AE64C53344

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1FhLJ2e/H+MCUa/W+WbQMpYHw/9Ey7GC10AIcWg:1Fhlr/aa+WbQMgy7p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33247:gbCCCgQQbDaQAwvABU2caWEMGQQoDCz6KMgoACkzQRMFYJE5IRhIADAG5w4CAKC2UiECArzQyoJxZBUYQfhQAAcSgC8qUJMS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6fc2589cbe7ffff
Perceptual Hash:b256d6f579160703
Difference Hash:0c4d692b120c0c86
Wavelet Hash:e4fc0501c3e7e743
Color Hash:N/A

Other Hashes

Crop Resistant:0c4d692b120c0c86

Scan History

Scan history not available

Unable to load historical scan data