pymes-negocios[.]vercel[.]app

This domain, pymes-negocios.vercel.app, operates as a high-risk phishing site impersonating Bancolombia’s official Sucursal Virtual Negocios platform. Analysis indicates the site presents a fraudulent login interface designed to harvest corporate banking credentials, specifically targeting small and medium-sized business (PYME) accounts. The page title, 'Bancolombia | Sucursal Virtual Negocios,' directly mirrors the legitimate portal, increasing the likelihood of deception for users expecting authentic banking services. The threat extends beyond credential theft, as compromised accounts could facilitate unauthorized fund transfers, invoice fraud, or further targeted attacks against business financial infrastructure.

Technical evidence confirms the malicious nature of this domain. As of the latest scan, 18 out of 95 security vendors on VirusTotal flag the domain as phishing, with detection signatures including 'Phishing.Bancolombia' and 'BankingFraud.Generic.' The domain was registered through Vercel Inc. on May 20, 2026, an unusually future-dated creation that may indicate an attempt to evade automated detection systems relying on domain age. Infrastructure analysis reveals the site resolves to 216.198.79.195, hosted within Vercel’s US-based network. The domain appears on one security blocklist and is explicitly flagged by Google Safe Browsing as phishing. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of security while failing to validate the site’s legitimacy.

Users who have visited pymes-negocios.vercel.app or entered credentials on the site must take immediate action to mitigate risk. First, terminate all active sessions on the legitimate Bancolombia platform and revoke any suspicious transactions. Reset passwords for the affected account and any other services where identical credentials may have been reused, prioritizing financial and email accounts. Enable multi-factor authentication (MFA) using app-based or hardware tokens, avoiding SMS-based verification due to SIM-swapping risks. Monitor bank statements for unauthorized transactions and report any anomalies to Bancolombia’s fraud department. If financial data was exposed, consider placing a fraud alert with credit bureaus. Organizations should conduct a forensic review of devices used to access the site, scanning for malware or persistent threats that may have been deployed during the session.