Alertas para Colombia
Cada día buscamos en las listas de amenazas dominios .co nuevos y sitios que imitan a bancos y entidades colombianas (Bancolombia, Nequi, Daviplata, Davivienda, BBVA, Banco de Bogotá, DIAN, Registraduría, Policía, SIMIT…).
Los dominios están desactivados (
hxxp, [.]). No los copies en el navegador.| Fecha | Dominio | Imita a | Tipo | Fuente |
|---|---|---|---|---|
| 2026-10-28 | analytics[.]bulutentegrasyon[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | kolhxvfjdpkwekwuydap[.]supabase[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | fscglnjtlkeycaunlkcx[.]supabase[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | biorganicos[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | aspmedia[.]co | — | Malware | ThreatFox (abuse.ch) |
| 2026-10-28 | anmoba[.]com[.]co | — | Malware | ThreatFox (abuse.ch) |
| 2026-10-28 | biedronka[.]discount-eu[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | yucral[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | yonogam[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | xjchxbcccc[.]carrd[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | woodies-ie[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | visitlamu[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | vipsale[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | vinted[.]pl-dostawa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | verificacaodisponivel[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | upigame[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | tiran-ga[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | tienkazw[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | thevibecompany[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | supenrcard[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | smbc-card01[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | skinbaron[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | sjkhfdf[.]carrd[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | sizeer[.]eushophub[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | saway[.]dailysaver[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | samup[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | rplg[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | rituals[.]detaliczny[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | remboursement-primeamz[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | redeem[.]biedronka[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | realtoolfora[.]carrd[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | prime-renouvellement[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | paypal[.]com-websppsc-verification[.]epsilons[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | page[.]jaiho-win[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | page[.]56-pix[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | olx[.]pl-dostawa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | olx-8528418[.]fuckall[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | olx-6934824[.]fuckall[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ochnikpl[.]vipsale[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ngtel[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | necessarily[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | multikino[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | mtsjp[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | merchant[.]allegroshop[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | majorpilot[.]mypi[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | m-pa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | linkbio[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ldloutletssale[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | karwei[.]dailysaver[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | k-jp[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | jysksale[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | jyskoutlet[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ipumu[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | intersport[.]eushophub[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | indoregames[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | indiannet[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | icloudservice[.]mailsecu[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | hragents[.]nadqa[.]nadsoft[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | gmb[.]xhalo[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | formsubmit[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | felfecirdom[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | fb567e[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ezebra[.]dailysaver[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | eushophub[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | essence[.]hygicare[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | email-classplus[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | dledkopzinhgfuwajmzf[.]supabase[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | deichmann[.]eushophub[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | datcu[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | csfloat[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | credit-manufacturation-doliper[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | cq-safewatch[.]grupocgd[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | corrector[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | cittagames[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | cccpl[.]vipsale[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | c75e76[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | buff-163[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | booking[.]flowstayrooms-id731920[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | booking[.]flowstayrentals-id527198[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | booking[.]flowbookingrooms-id735291[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | bonprix[.]dailysaver[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | bingo-101[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | bdvdbdbgdbgdb[.]carrd[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | atualizarnvtaxas[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | armpit[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | appleid[.]mailsecu[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | app[.]biedronka[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | allegrolokalnie[.]pl-dostawa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | allegro[.]pl-dostawa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | alebilet[.]pl-dostawa[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | advanced-monitoring9378[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | accounts[.]binanceuz[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | a2zapk[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 777-rummy[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 4fpl[.]detaliczny[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 380a11[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 2026jysksala-pl[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 1password[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 1ea7f8[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | 1a7255[.]earthgreen[.]com[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | mercadolivre[.]meumercadolivre[.]shop | Mercado Libre | Phishing | OpenPhish |
| 2026-10-28 | preds[.]co | — | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-28 | mrxveouxpdmpmsxibwmy[.]supabase[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | ttbsotogfkhssetpyfzs[.]supabase[.]co | — | Phishing | Phishing Army |
| 2026-10-28 | impressionagency[.]co | — | Phishing | Phishing Army |
| 2026-10-27 | soporte-bncr[.]co | — | Phishing | Phishing Army |
| 2026-10-27 | archivos[.]soporte-bncr[.]co | — | Phishing | Phishing Army |
| 2026-10-27 | mercadolibre[.]com[.]pe | Mercado Libre | Phishing | OpenPhish |
| 2026-10-27 | articulo[.]mercadolibre[.]com[.]pe | Mercado Libre | Phishing | OpenPhish |
| 2026-10-27 | koa1sb08[.]forgestudios[.]co | — | Malware | ThreatFox (abuse.ch) |
| 2026-10-27 | forgestudios[.]co | — | Malware | ThreatFox (abuse.ch) |
| 2026-10-26 | sucursalpersonas-transaccionesbancolombia[.]zz[.]com[.]ve | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | sucursalpersonas-transaccionesbancolombia-mau[.]mypressonline[.]com | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | sucursalpersonas-transaccionesbancolombia-april[.]mypressonline[.]com | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | sucursalpersonas-transaccionesbancolombia-abril[.]mypressonline[.]com | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | sucursalpersonas-bancolombiasas[.]zz[.]com[.]ve | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | sucursal-profecional-bancolombiasas[.]zz[.]com[.]ve | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | simit-pagos[.]co | SIMIT | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | mx-bbva[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | mercadolibree[.]info | Mercado Libre | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | mercadolibre[.]at | Mercado Libre | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | mercado-livre[.]produtos[.]usacomment[.]com | Mercado Libre | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | dian-vegas-live[.]com | DIAN | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-netcash-empr-login[.]cc | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-net-cash[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-login-netcash[.]bond | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-eu[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-empresas-acceso[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-bancomer[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-bancaonline[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | aviso-bbva[.]com | BBVA | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | alertasynotificaciones-bancolombia[.]zz[.]com[.]ve | Bancolombia | Malicioso | hagezi Threat Intelligence Feeds |
| 2026-10-26 | simulador-credito-auto-bbva[.]ideeo[.]mx | BBVA | Phishing | Phishing Army |
| 2026-10-26 | segurossurah360[.]vercel[.]app | Sura | Phishing | Phishing Army |
| 2026-10-26 | mercadolibrecapital[.]live | Mercado Libre | Phishing | Phishing Army |
| 2026-10-26 | mercadolibre-capital[.]live | Mercado Libre | Phishing | Phishing Army |
| 2026-10-26 | ecuador-avanza--cajasocialsolic[.]replit[.]app | Banco Caja Social | Phishing | Phishing Army |
| 2026-10-26 | cancelartupago[.]appbancolombia[.]co[.]hstn[.]me | Bancolombia | Phishing | Phishing Army |
| 2026-10-26 | cajasocialsolicute[.]wixsite[.]com | Banco Caja Social | Phishing | Phishing Army |
| 2026-10-26 | bbva-nimbus[.]161-97[.]chattogrambizcon[.]com | BBVA | Phishing | Phishing Army, hagezi Threat Intelligence Feeds |
| 2026-10-26 | bbva-cibc-onlinesbi[.]com[.]ph | BBVA | Phishing | Phishing Army |
| 2026-10-26 | bbva-app-1-c6c6bqhhg7dqh0a9[.]mexicocentral-01[.]azurewebsites[.]net | BBVA | Phishing | Phishing Army |
| 2026-10-26 | bancolombiainvest[.]net | Bancolombia | Phishing | Phishing Army, hagezi Threat Intelligence Feeds |
| 2026-10-26 | bancolombiacupoaumento[.]vercel[.]app | Bancolombia | Phishing | Phishing Army |
| 2026-10-26 | bancodeoccidente[.]blogspot[.]lt | Banco de Occidente | Phishing | Phishing Army |
| 2026-10-26 | bancfalabella[.]vercel[.]app | Banco Falabella | Phishing | Phishing Army |
| 2026-10-26 | bancolombbia[.]vercel[.]app | Bancolombia | Phishing | OpenPhish, Phishing Army |
Alertas publicadas
¿Recibiste un enlace sospechoso? Compruébalo en el Verificador de enlaces.
Cómo funciona
- Cada hora revisamos los dominios maliciosos nuevos en las listas de amenazas.
- Marcamos los dominios .co y los que imitan a bancos y entidades colombianas (nombre de la marca, letras cambiadas, caracteres engañosos).
- Los mostramos desactivados (hxxp, [.]) para que no se abran por accidente.
- Si hay nuevos, publicamos como máximo una alerta al día en el blog.
