# Phishing sites impersonating Bancolombia PhishDestroy has recorded 47 phishing domains impersonating Bancolombia since 2025-10-25, 0 of them in the last 30 days. The most used registrars are Vercel and GoDaddy.com; the most common TLDs are .app and .com. Open Bancolombia only from its official app or a saved bookmark. 47Domains, all time 0Last 30 days 10Online at last check 14Confirmed takedowns ## New domains in the last 90 days Bancolombia phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Bancolombia site Words most often added to the brand in reported domains: goteal, temporary, zeabur, allianz, mail, hub, duckdns, personas, creditovirtual, fqm. - Type the address yourself or use a bookmark; phishing links for Bancolombia arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Bancolombia does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Bancolombia phishing domains The 47 most recently detected domains impersonating Bancolombia Domain | First detected | Status at last check | Registrar | [alzinfoseg.com](https://phishdestroy.io/domain/alzinfoseg.com/) | 2026-08-22 | Offline | Name.com | [surainforseg.com](https://phishdestroy.io/domain/surainforseg.com/) | 2026-08-05 | Offline | Name.com | [seguroalz.com](https://phishdestroy.io/domain/seguroalz.com/) | 2026-07-23 | Online | Name.com | [inforalz.com](https://phishdestroy.io/domain/inforalz.com/) | 2026-07-23 | Online | Name.com | [cupolatricol.duckdns.org](https://phishdestroy.io/domain/cupolatricol.duckdns.org/) | 2026-07-11 | Offline | DuckDNS | [sucursal-personas-colombia.vercel.app](https://phishdestroy.io/domain/sucursal-personas-colombia.vercel.app/) | 2026-07-01 | Offline | Vercel | [pruebabancoltarjeta1.vercel.app](https://phishdestroy.io/domain/pruebabancoltarjeta1.vercel.app/) | 2026-06-27 | Offline | Vercel | [bancolaumentatucupo-net.vercel.app](https://phishdestroy.io/domain/bancolaumentatucupo-net.vercel.app/) | 2026-06-27 | Offline | Vercel | [bancolombia-creditovirtual-co-com.netlify.app](https://phishdestroy.io/domain/bancolombia-creditovirtual-co-com.netlify.app/) | 2026-06-25 | Offline | Netlify | [aumento-cupovirtual-com.vercel.app](https://phishdestroy.io/domain/aumento-cupovirtual-com.vercel.app/) | 2026-06-25 | Offline | Vercel | [aumentatucupovirt-co.vercel.app](https://phishdestroy.io/domain/aumentatucupovirt-co.vercel.app/) | 2026-06-25 | Offline | Vercel | [bancolombia-creditovirtual-co.netlify.app](https://phishdestroy.io/domain/bancolombia-creditovirtual-co.netlify.app/) | 2026-06-24 | Offline | Netlify | [allianz-hub.vercel.app](https://phishdestroy.io/domain/allianz-hub.vercel.app/) | 2026-05-30 | Offline | Vercel | [faulty-lock.surge.sh](https://phishdestroy.io/domain/faulty-lock.surge.sh/) | 2026-05-15 | Taken down | Surge.sh | [personas-svp.vercel.app](https://phishdestroy.io/domain/personas-svp.vercel.app/) | 2026-05-11 | Taken down | Vercel | [sucursalvrtla.duckdns.org](https://phishdestroy.io/domain/sucursalvrtla.duckdns.org/) | 2026-04-26 | Taken down | DuckDNS | [xjr.deq.temporary.site](https://phishdestroy.io/domain/xjr.deq.temporary.site/) | 2026-04-25 | Taken down | eNom | [aumentocolombia.vercel.app](https://phishdestroy.io/domain/aumentocolombia.vercel.app/) | 2026-04-21 | Taken down | Vercel | [mipago-acueducto.com](https://phishdestroy.io/domain/mipago-acueducto.com/) | 2026-04-20 | Taken down | Name.com | [hub-allianz.vercel.app](https://phishdestroy.io/domain/hub-allianz.vercel.app/) | 2026-04-15 | Taken down | Vercel | [nofxtaefa.online](https://phishdestroy.io/domain/nofxtaefa.online/) | 2026-04-13 | Offline | TUCOWS.COM | [allianzhub.vercel.app](https://phishdestroy.io/domain/allianzhub.vercel.app/) | 2026-04-03 | Offline | Vercel | [gmf.mcq.temporary.site](https://phishdestroy.io/domain/gmf.mcq.temporary.site/) | 2026-04-01 | Online | ENOM | [mailin.goteal.io](https://phishdestroy.io/domain/mailin.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [smtp2.goteal.io](https://phishdestroy.io/domain/smtp2.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [newmail.goteal.io](https://phishdestroy.io/domain/newmail.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [mail12.goteal.io](https://phishdestroy.io/domain/mail12.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [post.goteal.io](https://phishdestroy.io/domain/post.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [smtps.goteal.io](https://phishdestroy.io/domain/smtps.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [ns2.goteal.io](https://phishdestroy.io/domain/ns2.goteal.io/) | 2026-03-24 | Offline | GoDaddy.com | [infosegsura.com](https://phishdestroy.io/domain/infosegsura.com/) | 2026-03-17 | Online | Name.com | [surainfoseg.com](https://phishdestroy.io/domain/surainfoseg.com/) | 2026-03-17 | Offline | Name.com | [seguro-allianz-delta.vercel.app](https://phishdestroy.io/domain/seguro-allianz-delta.vercel.app/) | 2026-03-04 | Offline | Vercel | [a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app](https://phishdestroy.io/domain/a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app/) | 2026-02-26 | Offline | Tucows Domains | [tufinanzalegal.com](https://phishdestroy.io/domain/tufinanzalegal.com/) | 2026-01-27 | Taken down | Registrar.eu | [tufinanzadeapoyo.com](https://phishdestroy.io/domain/tufinanzadeapoyo.com/) | 2026-01-26 | Offline | Registrar.eu | [bancolombiacreditodirecto.zeabur.app](https://phishdestroy.io/domain/bancolombiacreditodirecto.zeabur.app/) | 2026-01-06 | Taken down | GoDaddy.com | [bancolombiafinanciaciondirecta.zeabur.app](https://phishdestroy.io/domain/bancolombiafinanciaciondirecta.zeabur.app/) | 2025-12-30 | Taken down | GoDaddy.com | [bancolombiaprestamosonline.zeabur.app](https://phishdestroy.io/domain/bancolombiaprestamosonline.zeabur.app/) | 2025-12-29 | Taken down | GoDaddy.com | [mipersonascancelaseguro.com](https://phishdestroy.io/domain/mipersonascancelaseguro.com/) | 2025-12-27 | Offline | PublicDomainRegistry.com | [cupoatractivo-com-6v48.vercel.app](https://phishdestroy.io/domain/cupoatractivo-com-6v48.vercel.app/) | 2025-12-20 | Taken down | Vercel | [anular-debito-bancolombia.iceiy.com](https://phishdestroy.io/domain/anular-debito-bancolombia.iceiy.com/) | 2025-12-13 | Online | Porkbun | [16fdc029-01ca-4047-933e-bf5575463977.vercel.app](https://phishdestroy.io/domain/16fdc029-01ca-4047-933e-bf5575463977.vercel.app/) | 2025-12-12 | Taken down | Vercel | [pop.owl.temporary.site](https://phishdestroy.io/domain/pop.owl.temporary.site/) | 2025-12-06 | Online | ENOM | [tdk.xjw.temporary.site](https://phishdestroy.io/domain/tdk.xjw.temporary.site/) | 2025-11-27 | Online | ENOM | [zmn.djb.temporary.site](https://phishdestroy.io/domain/zmn.djb.temporary.site/) | 2025-10-31 | Online | ENOM | [mail.fqm.nyx.temporary.site](https://phishdestroy.io/domain/mail.fqm.nyx.temporary.site/) | 2025-10-25 | Taken down | ENOM | [All 47 Bancolombia reports](https://phishdestroy.io/domain/?brand=Bancolombia) ## Where they are registered and hosted ### Registrars - Vercel13 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)10 - [Name.com](https://phishdestroy.io/registrar/name-com/)7 - [ENOM](https://phishdestroy.io/registrar/enom/)5 - [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)2 - DuckDNS2 - Netlify2 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)1 ### Top-level domains - [.app](https://phishdestroy.io/tld/app/)19 - [.com](https://phishdestroy.io/tld/com/)11 - [.io](https://phishdestroy.io/tld/io/)7 - [.site](https://phishdestroy.io/tld/site/)6 - [.org](https://phishdestroy.io/tld/org/)2 - [.online](https://phishdestroy.io/tld/online/)1 - [.sh](https://phishdestroy.io/tld/sh/)1 ### Hosting networks - Amazon.com, Inc.14 - AMAZON-02 - Amazon.com, Inc., US12 - ORACLE-BMC-31898, US4 - AMAZON-02, US3 - TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 3 - Oracle Corporation2 - WILDCARD-AS Wildcard UK Limited, GB1 - DIGITALOCEAN-ASN, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bancolombia; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/bancolombia/