A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "recaudos-facil.com/"
• Sites Report: "https://recaudos-facil.com/"
• IP: 134.33.96.151
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/27) and time (12:00:00)
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "postpagoportal.com/"
• Sites Report: "https://postpagoportal.com/"
• IP: 131.153.13.206
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/26) and time (12:00:00)
Note: It's only visible in the browser engine of the mobile agent. VPN is required, because if you do not have vpn redirects to the Facebook page.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "promo-postpago.com/"
• Sites Report: "https://promo-postpago.com/"
• IP: 134.33.96.151
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/07/01) and time (12:00:00)
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "facturasydescuentos.urlw.info/"
• Sites Report: "https://facturasydescuentos.urlw.info/toinicio.php#no-back-button"
• IP: 104.21.29.121
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/07/01) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "recaudos-facil.com/"
• Sites Report: "https://recaudos-facil.com/"
• IP: 134.33.96.151
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/27) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "factsie-col-pse.replit.app/"
• Sites Report: "https://factsie-col-pse.replit.app/index_.php"
• IP: 34.117.33.233
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/27) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "postpagoportal.com/"
• Sites Report: "https://postpagoportal.com/"
• IP: 131.153.13.206
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/26) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "empiezanpromosdejunio.netlify.app/"
• Sites Report: "https://empiezanpromosdejunio.netlify.app/"
• IP: 3.125.36.175
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/26) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "portaldepagosonline.lat/"
• Sites Report: "https://portaldepagosonline.lat/"
• IP: 212.85.6.200
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/19) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "pagosexpressclaro.lat/"
• Sites Report: "https://pagosexpressclaro.lat/"
• IP: 212.85.29.82
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/19) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "portalclaropagos.com.co/"
• Sites Report: "https://portalclaropagos.com.co/pago.php#no-back-button"
• IP: 162.241.61.79
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/18) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "claro.post-pago.es/"
• Sites Report: "https://claro.post-pago.es/index.php?sid=K1JwM1NxWk9FcEQwZ1RkL1puMml3K3JuVG1WV3A0anFuYUVUZWsyOTd2Yz0="
• IP: 82.197.83.189
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/18) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "junioconpromoshoy.pages.dev/"
• Sites Report: "https://junioconpromoshoy.pages.dev/"
• IP: 172.66.44.54
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/19) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "junioconpromoshoy.pages.dev/"
• Sites Report: "https://junioconpromoshoy.pages.dev/"
• IP: 172.66.44.54
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/17) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the 4-72 portal, causing customers to be affected be ...
show moreA website has been identified that impersonates the 4-72 portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://www.4-72.com.co/"
This is the identified malicious site and domain
• Domain Report: "countherin.com/co"
• Sites Report: "https://countherin.com/co"
• IP: 43.134.185.15
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/20) and time (16:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "promdescuentosparciales.com/"
• Sites Report: "https://promdescuentosparciales.com/pagofacturas/e74cd29e2aaa78cf8a5afdafa452a39b#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/6cfe77d34e249800a8b9820f525e9e5d#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/e66e8cf181d0683511c54568428df117#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/af935991730d2ff66b17c839c1875306#no-back-button"
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
• IP: 20.124.89.107
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/iVzIYit -> "https://promdescuentosparciales.com/pagofacturas/e66e8cf181d0683511c54568428df117#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/6cfe77d34e249800a8b9820f525e9e5d#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/e74cd29e2aaa78cf8a5afdafa452a39b#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/af935991730d2ff66b17c839c1875306#no-back-button"
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
This is the identified malicious site and domain
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "portalpago-claroo.com/"
• Sites Report: "https://portalpago-claroo.com/index.php?sid=a1QrR0JLMEE3K21xNzZIdUhCam5UZm42M3d4RzkzM0ZnMnB3Sk03YVVLND0&code=ANF8E1892"
• IP: 46.202.198.241
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/18) and time (12:00:00)
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "tuofertasmovil.com/"
• Sites Report: "https://tuofertasmovil.com/"
• IP: 131.153.236.5
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/18) and time (12:00:00)
Note: Only visible in the browser engine of the mobile agent. VPN is required, because if you do not have vpn redirects to the Facebook page.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "yellow-eagle-293728.hostingersite.com/"
• Sites Report: "https://yellow-eagle-293728.hostingersite.com/"
• IP: 91.108.103.75
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/18) and time (09:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "promdescuentosparciales.com/"
• Sites Report: "https://promdescuentosparciales.com/pagofacturas/e74cd29e2aaa78cf8a5afdafa452a39b#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/6cfe77d34e249800a8b9820f525e9e5d#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/e66e8cf181d0683511c54568428df117#no-back-button"
• IP: 20.124.89.107
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/17) and time (12:00:00)
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/iVzIYit -> "https://promdescuentosparciales.com/pagofacturas/e66e8cf181d0683511c54568428df117#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/6cfe77d34e249800a8b9820f525e9e5d#no-back-button"
"https://promdescuentosparciales.com/pagofacturas/e74cd29e2aaa78cf8a5afdafa452a39b#no-back-button"
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
This is the identified malicious site and domain
• Domain Report: "hab.me/"
• Sites Report: "https://hab.me/iVzIYit"
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "ofertasparati.azurewebsites.net/"
• Sites Report: "https://ofertasparati.azurewebsites.net/claro-2//"
• IP: 20.212.64.16
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/12) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "ofertasparatodos.azurewebsites.net/"
• Sites Report: "https://ofertasparatodos.azurewebsites.net/claro-2/"
• IP: 20.212.64.16
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "facturadescuentclr.azurewebsites.net/"
• Sites Report: "https://facturadescuentclr.azurewebsites.net/"
• IP: 40.69.106.98
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/05/26) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
Phishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.