ScanMalware.com

Security Scan Report: secburlordfut.bid

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/917069d8-0d19-44bf-b087-c7a6a8d9f5ddDomain and IP registration (RDAP)/api/v1/rdap/917069d8-0d19-44bf-b087-c7a6a8d9f5ddHow often this domain was scanned/api/v1/domain/stats/secburlordfut.bidScan history for this domain/api/v1/domain/history/secburlordfut.bid?limit=15
This website contacted 6 IPs in 1 country across 3 domains to perform 9 HTTP transactions. The main domain is secburlordfut.bid and was registered 1 month ago.

Submitted URL: https://secburlordfut.bid/inicio/b-14/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing page impersonating Bancolombia's online banking portal on secburlordfut.bid, harvesting username and ATM password via a fake login form with error prompts.

Risk Factors (4)
Brand impersonation of a major bank on a mismatched .bid domain
Credential/password collection form impersonating online banking login
Fake 'incorrect username or password' prompt used to retry captured credentials
Unranked domain with no legitimate reputation
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas

Scan Type

public

Domain Name Analysis

The domain name 'secburlordfut.bid' uses the .bid top-level domain without a subdomain. Its registrable label 'secburlordfut' stretches across 13 characters split between four vowels and 9 consonants. It segments into 5 words: sec, bur, lord, fu, t. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

2 Bancolombia Sucursal Virtual Personas (Q) iProgrémate! Consulta el estado de nuestros canales y los mantenimientos programados. Mas info aqui. jHola! Ingresa los datos para gestionar tus produc...

Page Load Overview

1.55s
Total Load Time
204 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:461 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
92%
government public service
58%
e-commerce shopping
58%
documentation technical
50%
technology software
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.196.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.21.54Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
96--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T131D284266AA7052264E394FE27E7774131325013E449C9793EAC9718CF89B8C8E73BDD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:aOYfJ0OgVvChFMfXNQOHt+1294bNOHrdpgWpBxNWYgyJ7RoeBxpJxnwdnwd271Z6:I2a+PHxGUO7MQZNjj+ILFPNtmX3NAG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30321:l7EISjEAQ7QSYVKAIDY4gNgpNkB0GCIBIAOgQoUONlrjVCIROAXgkAUBEKRJcAjKpsADo4IE0C5jEbwhjIZoLMKgCDEMUASy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6e4251dcbefe7ff
Perceptual Hash:b356d6f5dc060721
Difference Hash:4c0d4d2b925a4c08
Wavelet Hash:e6e40109cbcbc3e7
Color Hash:N/A

Other Hashes

Crop Resistant:4c0d4d2b925a4c08

Scan History

Scan history not available

Unable to load historical scan data