EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of seguro-allianz-delta.vercel.app

Detection Info

http://seguro-allianz-delta.vercel.app/
Detected Brand
Bancolombia
Country
Colombia
Confidence
100%
HTTP Status
200
Report ID
7be14fb5-30eā€¦
Analyzed
2026-03-05 12:36
Final URL (after redirects)
https://seguro-allianz-delta.vercel.app/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1DF044DF43694F4560AB747E3807F1102F3385D3B140E5960A3A5ECEA726989EA0B7FD9
CONTENT ssdeep
1536:qhX1kCNE1Fejb6z5TGyi4oha6Ih6LcRs5Vx2t8qL1fyJFoySRFyhF2K5O9sPaUdB:0Ni094ohSQQRgV8waKL0q

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
fb81d08cc78eb0a7
VISUAL aHash
ffcbc1a1a3858181
VISUAL dHash
e31b19494f1d1d5d
VISUAL wHash
ffcbc5e1a3858181
VISUAL colorHash
06600008000
VISUAL cropResistant
e31b19494f1d1d5d,6b7a5cdcc9899892,0f3f6edb1b31e166,8e156c654b2acbcf,b57c783870073f78,b02b6765714e59f3,4e430d2643419080

Code Analysis

Risk Score 79/100
Threat Level ALTO
āš ļø Phishing Confirmed
šŸŽ£ Credential Harvester šŸŽ£ OTP Stealer šŸŽ£ Banking

šŸ”¬ Threat Analysis Report

ā€¢ Threat: Impersonation
ā€¢ Target: Bancolombia
ā€¢ Method: Free hosting with brand logo
ā€¢ Exfil: Unknown (due to the lack of information in the screenshot)
ā€¢ Indicators: Vercel subdomain, Brand Logo
ā€¢ Risk: High

šŸ”’ Obfuscation Detected

  • atob
  • fromCharCode
  • unicode_escape

šŸ“Š Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Free Hosting
The use of free hosting is a strong indicator of phishing.
Brand Impersonation
The site attempts to impersonate a known brand, Bancolombia.

šŸ”¬ Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Bancolombia users (Colombia)
Attack Method
Brand impersonation + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

āš ļø Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking
  • 10 obfuscation techniques

šŸ¢ Brand Impersonation Analysis

Impersonated Brand
Bancolombia
Official Website
null
Fake Service
Banking Portal

āš”ļø Attack Methodology

Primary Method: Credential Harvesting

The attacker likely intends to steal user credentials by mimicking the legitimate Bancolombia website on a malicious domain.

Secondary Method: Malware distribution

The site could potentially redirect to a malware payload, or attempt to inject malicious code to gain user access.

šŸŒ Infrastructure Indicators of Compromise

Domain Information

Domain
seguro-allianz-delta.vercel.app
Registered
Unknown
Registrar
Unknown
Status
Active

šŸ¤– AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Bancolombia
https://www.allianzhub.vercel.app/
Apr 06, 2026
 Screenshot
Bancolombia
http://allianzhub.vercel.app/
Apr 05, 2026
 Screenshot
Bancolombia
https://www.seguro-allianz-delta.vercel.app/
Mar 05, 2026

Scan History for seguro-allianz-delta.vercel.app

Found 1 other scan for this domain

šŸ˜°
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.