Security Scan Report: www.bcol-panel-e7aa.vercel.app

Redirected to:
https://bcol-panel-e7aa.vercel.app/inicio/b-14/index.php
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.bcol-panel-e7aa.vercel.app/

Effective URL:
https://bcol-panel-e7aa.vercel.app/inicio/b-14/index.php
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed phishing page impersonating Bancolombia's online banking portal on a vercel.app subdomain, harvesting username and password; flagged by Google Safe Browsing for social engineering.

Risk Factors (6)
Brand impersonation of Bancolombia on a non-official vercel.app subdomain
Credential collection form (username + password) on a shared hosting tenant of unknown creation date
Google Safe Browsing social engineering verdict
Unranked domain with no legitimate banking reputation
IDS alerts for actor-abused cloud hosting service (vercel.app)
Pre-filled authentication failure message used as a credential-reentry lure
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas

Scan Type

public

Domain Name Analysis

Domain 'www.bcol-panel-e7aa.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.bcol-panel-e7aa'. The second-level label 'vercel' is 6 characters long holding two vowels versus four consonants. Breaking it apart gives 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

2 Bancolombia Sucursal Virtual Personas iProgramate! Consulta el estado de nuestros canales y los mantenimientos programados. Mas info aqui. jHola! Ingresa los datos para gestionar tus productos...

Page Load Overview

3.38s
Total Load Time
205 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:461 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
92%
government public service
58%
e-commerce shopping
58%
documentation technical
50%
technology software
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
564.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
264.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
135--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FEE296266AA7053264E390FE27E7774121369013E449C9793EEC97188F89B8C4E737EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:W1OYfJ0OgVvChFMfXNQOHt+1294bNOHrdpgWpBxNWYgyJ7RoeBxpJxnwdnwd2715:Wj2a+PHxGUO7MQZd+ILFPNLWXcNAUp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31750:mAjEEYFKAQoE4ewgJ9ohABwQSOGHlmaJcwB1hk3AXcLg2QiggoUWggUmOmIKQphEIFGYiJYQCAABjCAQBwLUKMbZkVy0SwAw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6e4251dcbefe7ff
Perceptual Hash:b356d6f5dc060721
Difference Hash:4c0d4d2b925a4c08
Wavelet Hash:e6e40109cbcbc3e7
Color Hash:N/A

Other Hashes

Crop Resistant:4c0d4d2b925a4c08

Scan History

Scan history not available

Unable to load historical scan data