# nofxtaefa.online — MALICIOUS

> Threat analysts confirm nofxtaefa.online as a live phishing site impersonating Bancolombia’s online banking portal.

## Summary
nofxtaefa.online has been confirmed as an active high-risk phishing site impersonating Bancolombia’s official online banking portal, Bancolombia Sucursal Virtual Personas. The domain is currently live and distributing malicious content masquerading as the legitimate banking platform. Users are urged to avoid interacting with this domain.  nofxtaefa.online was flagged by 7 of 95 VirusTotal security vendors, registered through Tucows.com Co., and resolves to IP address 52.72.49.79. The domain was created on April 11, 2026 and holds a valid Let’s Encrypt SSL certificate. VirusTotal analysis shows this domain is part of an ongoing credential harvesting campaign targeting Spanish-speaking banking users.  Despite its recent creation, this domain remains active and dangerous. Users should immediately block nofxtaefa.online via firewall rules and update hosts files if applicable. Bancolombia customers are advised to access their accounts only through the official bancolombia.com domain and enable two-factor authentication. Report any suspicious activity to Bancolombia’s fraud department and local cybercrime units. Monitor financial accounts closely for unauthorized transactions following any potential exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP ?)
- Page title: Bancolombia Sucursal Virtual Personas

## Domain Intelligence
- Registered: 2026-04-11 03:25:10
- Registrar: TUCOWS.COM, CO.
- IP: 52.72.49.79

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ad7a0fd2-0825-45cc-a2dd-11320870e4d1
- PhishDestroy: https://phishdestroy.io/domain/nofxtaefa.online/
- LLM endpoint: https://phishdestroy.io/domain/nofxtaefa.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nofxtaefa.online/
Last updated: 2026-04-13