allianz-hub[.]vercel[.]app

PhishDestroy has identified allianz-hub.vercel.app as a high-risk generic phishing domain that actively impersonates Bancolombia, a prominent Colombian bank. The site is designed to trick users into entering sensitive financial credentials, potentially leading to account takeover and fraud. No specific crypto drainer kit was detected, but the threat remains severe due to the targeted brand and active status.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports a detection rate of 9 out of 95 security vendors, signifying broad recognition as a threat. The domain is registered through Vercel Inc. and resolves to IP address 216.198.79.131. Its SSL certificate is issued by Google Trust Services (WR1), which may lend a false sense of legitimacy. Notably, the domain appears on 1 security blocklist and is not flagged by Google Safe Browsing, indicating a gap in some protective systems. The page title explicitly displays "Bancolombia," confirming the impersonation.

As of this report, the phishing site remains active and operational, posing an ongoing risk to Bancolombia customers and any visitor. PhishDestroy recommends that users avoid interacting with this domain entirely. If you have already entered credentials, change your Bancolombia passwords immediately and enable two-factor authentication. Report any suspicious activity to Bancolombia’s security team. Always verify URLs directly through official bank channels before logging in.