hub-allianz[.]vercel[.]app

This domain, hub-allianz.vercel.app, operates as a high-risk phishing site specifically targeting Bancolombia customers through a fraudulent login portal. Analysis of the page structure and metadata confirms the site mimics the legitimate Bancolombia authentication interface, designed to harvest user credentials, including usernames, passwords, and potentially multi-factor authentication codes. The threat actor has implemented a convincing replica of the bank’s branding, increasing the likelihood of successful deception among unsuspecting users seeking to access their accounts. Such credential theft can lead to unauthorized transactions, identity fraud, and full account compromise within financial systems. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of this domain. The domain was registered on April 15, 2026, through Vercel Inc., a platform commonly abused for hosting phishing content due to its ease of deployment and free SSL certificates. The site resolves to the IP address 64.29.17.131, located in the United States under Vercel’s network. Detection metrics from VirusTotal indicate that 18 out of 95 security vendors have flagged this domain as malicious, while one security blocklist, PhishDestroy, has already listed it. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of security to visitors, despite the domain’s fraudulent intent. Users who have visited hub-allianz.vercel.app or entered credentials on the site should immediately take corrective action. First, reset passwords for Bancolombia accounts and any other platforms where identical credentials may have been reused. Enable multi-factor authentication if not already active, using app-based or hardware tokens rather than SMS-based methods. Monitor financial statements for unauthorized transactions and report suspicious activity to the bank’s official fraud department. Additionally, clear browser cache and cookies to remove any lingering session data, and consider running a full antivirus scan to detect potential malware introduced through the phishing site. Avoid interacting with any communications claiming to be from Bancolombia that reference this domain, as they may be follow-up phishing attempts.