Security Scan Report: aumentatucupya.vercel.app

Redirected to:
https://www.bancolombia.com/personas
Site favicon
Submitted: Aug 22, 2026, 2:45:18 PMCompleted: Aug 22, 2026, 2:48:04 PMpubliccompleted

This website contacted 46 IPs in 3 countries across 30 domains to perform 211 HTTP transactions. The main domain is bancolombia.com and was registered 26 years ago.

Submitted URL: http://aumentatucupya.vercel.app/

Effective URL:

https://www.bancolombia.com/personas
Redirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page impersonates Bancolombia and hosts critical phishing malware; treat as high‑risk and do not interact.

Risk Factors (4)
Brand impersonation of a major financial institution
Critical YARA malware detection (stealer kit)
High‑entropy, heavily obfuscated JavaScript with eval()
Untrusted hosting platform subdomain (vercel.app) with unknown age
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas - Bancolombia

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'aumentatucupya.vercel.app' is registered and includes subdomain 'aumentatucupya'. The second-level label 'vercel' is 6 characters long containing two vowels alongside 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://aumentatucupya.vercel.app/

Page Load Overview

12.08s
Total Load Time
20.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:42%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:11,430 chars
Detector Agreement:80%
Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

finance banking76% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
76%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3123.194.190.166Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
413.35.58.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
454.192.35.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.161.82.64Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4192.178.183.157Google · CDNUnited States
AS15169Google LLC
413.35.58.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
42.21.239.139Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
42.22.50.137Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
418.244.18.13Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21146--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18AE30830CC9628374A5752C9F3689B75B2A2A51BE941441BF6FC4BDE2FC0C9AE58731C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:F1ilsn2KGo9LN44O5/W/U/eYqyFxqecbvUyvWdMvwT:bGoxN44O5/W/U/eY9Hcbcyk7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:155500:ABAQSYCkUZBplTAECGe/gmAFDQGYgEQVhi4xCFBGgRMqJCsEQSBWShAAyA4CAnbOIihATGDQCQAloJoICYMA0WphQhDOTwTp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff003c3c3c3c0000
Perceptual Hash:8ad520f58ad68af5
Difference Hash:8616696961710631
Wavelet Hash:ffa13c3c3c3e8301
Color Hash:#c58a87

Scan History

Scan history not available

Unable to load historical scan data