ScanMalware.com

Security Scan Report: www.nrconectividad.online

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e33da172-f207-4ba6-ae57-b9d7eae51b86Domain and IP registration (RDAP)/api/v1/rdap/e33da172-f207-4ba6-ae57-b9d7eae51b86How often this domain was scanned/api/v1/domain/stats/nrconectividad.onlineScan history for this domain/api/v1/domain/history/nrconectividad.online?limit=15
This website contacted 3 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is nrconectividad.online and was registered 1 week ago.

Submitted URL: https://www.nrconectividad.online/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Phishing page impersonating Bancolombia's online banking portal on a 5-day-old unrelated domain, harvesting usernames and passwords via a fake login form. Do not enter credentials.

Risk Factors (5)
Impersonation of Bancolombia banking brand on a non-official domain
Credential harvesting form (username + password) under a bank's branding
Newly registered domain (5 days old)
No domain reputation / unranked in Cisco Umbrella
Footer disclaimers copied from the real bank to appear legitimate
Domain age information unavailable

Details

Page Title

Sucursal Virtual Personas - Bancolombia

Scan Type

public

Domain Name Analysis

The domain 'www.nrconectividad.online' uses the modern generic top-level domain (.online) and includes subdomain 'www'. Its registrable label 'nrconectividad' stretches across 14 characters with five vowels and 9 consonants. Segmentation suggests six words: nrc, one, c, ti, vida, d. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Sucursal Virtual Personas ¡Prográmate! Consulta el estado de nuestros canales y los mantenimientos programados. Más info aquí. ¡Hola! Ingresa los datos para gestionar tus productos y hacer transac...

Page Load Overview

0.23s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,227 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam71% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
71%
finance banking
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
53--

Detected Technologies2

Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124C1241165FC082F6263438AAB65773F1E66D147CA0D6604777C1A6A8F83E87DC3B1AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:VKJpQykVb6llV5DhCaM2hM2HB0naSfCJorBK:Ipp8y9C2W22k6A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5882:ACBaBAJDECKQFGgikYbZKmEAiBAJIBJGAACBwHjEaAErawCDGCIg9B4AMFEIgCAARQokkBBABABAsAgEhCBAICnwRAKZo0HC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e4e02499cfe7ff83
Perceptual Hash:f35356f51c8c0791
Difference Hash:4c0948231a4c0826
Wavelet Hash:e6e42081cfe7ff00
Color Hash:N/A

Other Hashes

Crop Resistant:4c0948231a4c0826

Scan History

Scan history not available

Unable to load historical scan data