surcursalvirtualcolombia.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of surcursalvirtualcolombia.vercel.app
This domain appears to host a Spanish-language webpage presented as "Bancolombia," a major Colombian banking brand. The subdomain name "surcursalvirtualcolombia" likely intends to evoke a virtual branch or online banking experience, and the page title plus visible branding suggest the site is attempting to represent financial services related to Colombia.
Based on the available metadata and screenshot, the site is served from a Vercel-hosted subdomain rather than from an official brand-owned banking domain. The page uses a modern web application structure with Next.js-style asset paths, and the visible content appears to be a branded landing page rather than a generic placeholder. Given the branding and financial theme, the site appears to target users seeking online banking or account-related access.
Safety Assessment for surcursalvirtualcolombia.vercel.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 20 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, one threat database listing was present, and the page title and screenshot show Bancolombia branding even though the site is hosted on a vercel.app subdomain rather than an apparent official bank domain. That combination may indicate an attempt to imitate a financial institution.
The malware scan also reported a generic suspicious-object finding, although many of the flagged URLs are static framework assets and templated paths that can sometimes produce noisy heuristic results on their own. Separately, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still adds some caution. The domain itself is several years old, which slightly reduces the likelihood of a throwaway setup, but the strong multi-engine phishing consensus outweighs that factor here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-09-26. It is hosted on Vercel infrastructure and resolves through Vercel nameservers, with the web server identified as Vercel and hosting located in the United States. The application structure appears consistent with a modern JavaScript framework deployment, including /_next/static asset paths.
DNSSEC is unsigned, which is common but means DNS responses do not appear to benefit from DNSSEC validation. No obvious TLS failure is present, but a valid certificate should not be treated as proof of legitimacy, especially when a finance-branded page is operating from a third-party hosting subdomain rather than an apparent official banking domain.
Share your experience with this website. Was it safe? Did you encounter any issues?