Security Scan Report: bcolcol-portal-7842.vercel.app

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 26 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://bcolcol-portal-7842.vercel.app/inicio/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake Bancolombia 'Sucursal Virtual Personas' login on a vercel.app subdomain, harvesting username and cashier password. Brand impersonation plus credential form: phishing.

Risk Factors (5)
Brand impersonation of Bancolombia on a non-official domain
Password-collecting login form on a shared hosting-platform subdomain
Obfuscatory subdomain naming (bcolcol-portal-7842) mimicking the bank's abbreviated branding
Unranked domain claiming to be a major bank portal
IDS alerts record the host as a commonly actor-abused cloud hosting service (vercel.app)
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas

Scan Type

public

Domain Name Analysis

Domain 'bcolcol-portal-7842.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'bcolcol-portal-7842'. The second-level label 'vercel' is 6 characters long holding 2 vowels versus four consonants. It segments into 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

2 Bancolombia Sucursal Virtual Personas iProgramate! Consulta el estado de nuestros canales y los mantenimientos programados. Mas info aqui. jHola! Ingresa los datos para gestionar tus productos...

Page Load Overview

0.66s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:461 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
92%
government public service
58%
e-commerce shopping
58%
documentation technical
50%
technology software
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
364.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
267--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T101E2A6266AA7053264A390FD67E7774121329013D449C9793EEC97188F8DB8C9E73BEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:W1bYfJ0OgVvChFMfXNQOHt+129ObNOHrdpgWpBxNWYgyJ7RoeBxpJxnwdnwd27pF:WW2aIPHxGUuesf7MQ8+ILVPNLWXcNAD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33557:4IgfUClAEIKkQ13QpGBEKkJALsjBRB0E4gQ1dFJAmJFgSghUpWAxD9TCAJ9BieKUFACKwADBCcAQDyBAAOAEaYfoIAiRmBQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6e4251dcbefe7ff
Perceptual Hash:b356d6f5dc060721
Difference Hash:4c0d4d2b925a4c08
Wavelet Hash:e6c00109cbcbe7e7
Color Hash:N/A

Other Hashes

Crop Resistant:4c0d4d2b925a4c08

Scan History

Scan history not available

Unable to load historical scan data