We are reporting two active phishing URLs hosted on Vercel that are impersonating Banco de Bogotá and harvesting user data:
hxxps://invxrcixnbogotx.vercel.app/
hxxps://librxinvercxbog.vercel.app/
Related abuse reports: 00861654, 00833966, 00833966
Status: Both sites have been online for more than 856 hours
Phishing indicators observed:
-
Recently registered domains
-
Unauthorized use of Banco de Bogotá branding (loan/reward pages)
-
Fake data accepted and taken forward (credential harvesting)
-
Short-term SSL certificates (3 months)
-
Validated with Banco de Bogotá as unauthorized
Despite prior reports, these phishing pages remain accessible. We request urgent review, takedown, and enforcement in line with Vercel’s security and acceptable use policies, as this poses an active financial fraud risk to users.