A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/o2iSVZ9 -> "https://claricom.co/mispromocionesclaro/e794fd34f60d3f6fa9e922c8ed50157d#no-back-button"
"https://claricom.co/mispromocionesclaro/fb6cee0788b0461ef484fda8cf47ae7d#no-back-button"
"https://claricom.co/mispromocionesclaro/36d52fb86b42d4f2f1ac107a7c500f3e#no-back-button"
"https://claricom.co/mispromocionesclaro/721da6a8e0b71b23da6a23f4859c5a7c#no-back-button"
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
This is the identified malicious site and domain
• Domain Report: "hab.me/"
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "pagoswebclaro.site/"
• Sites Report: "https://pagoswebclaro.site/index.php?sid=b1hIRjQ5eDNpUnFXeTRSOWNXQ2FmeG85enJLa3pXM0pWMkhHUGJIMEY2OD0="
• IP: 46.202.183.175
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/16) and time (12:00:00)
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "bclagportal-pagos.com/"
• Sites Report: "https://bclagportal-pagos.com/index.php?sid=YjB1Z1doaXBoRURkWml0bE10bGVWRFo2bkpJMGVnUHpnenZKWm5JcHFkdz0="
• IP: 89.116.109.225
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/16) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "facturadescuento.1rl.click/"
• Sites Report: "https://facturadescuento.1rl.click/toinicio.php#no-back-button"
• IP's: 172.67.150.115 - 104.21.30.30
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/12) and time (09:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "claricom.co/"
• Sites Report: "https://claricom.co/mispromocionesclaro/e794fd34f60d3f6fa9e922c8ed50157d#no-back-button"
"https://claricom.co/mispromocionesclaro/fb6cee0788b0461ef484fda8cf47ae7d#no-back-button"
"https://claricom.co/mispromocionesclaro/36d52fb86b42d4f2f1ac107a7c500f3e#no-back-button"
• IP: 20.83.155.168
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
I remain attentive to your comments, thank you
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/o2iSVZ9 -> "https://claricom.co/mispromocionesclaro/e794fd34f60d3f6fa9e922c8ed50157d#no-back-button"
"https://claricom.co/mispromocionesclaro/fb6cee0788b0461ef484fda8cf47ae7d#no-back-button"
"https://claricom.co/mispromocionesclaro/36d52fb86b42d4f2f1ac107a7c500f3e#no-back-button"
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
This is the identified malicious site and domain
• Domain Report: "hab.me/"
• Sites Report: "https://hab.me/o2iSVZ9"
• IP: 35.190.2.215
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "portall-pagoclaro.com/"
• Sites Report: "https://portall-pagoclaro.com/index.php?sid=dWlzZFpKbW9aL0hxUGdWY2xBRWhTcmVMektYSm9PSXF4YmxBZDFZSFRnaz0="
• IP: 82.197.80.143
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/12) and time (11:00:00)
Note: Only visible in the browser engine of the mobile agent.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "facturadescuento.1rl.click/"
• Sites Report: "https://facturadescuento.1rl.click/toinicio.php#no-back-button"
• IP: 185.77.97.66
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/12) and time (09:00:00)
Note: Only visible in the browser engine of the mobile agent.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "pclagdecspagos.com/"
• Sites Report: "https://pclagdecspagos.com/index.php?sid=VnhSLzBVRXJMNTZmSHQ5anBPRTVhVkZwdHNtZ0l2OEFnekN6OXRWVXZvWT0="
• IP: 185.77.97.66
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
Note: Only visible in the browser engine of the mobile agent.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "tuclato.com/"
• Sites Report: "https://tuclato.com/"
• IP: 131.153.13.231
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
Note: Only visible in the browser engine of the mobile agent. VPN is required, because if you do not have vpn redirects to the Facebook page.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/o2iSVZ9 -> https://claricom.co/mispromocionesclaro/e794fd34f60d3f6fa9e922c8ed50157d#no-back-button
https://claricom.co/mispromocionesclaro/fb6cee0788b0461ef484fda8cf47ae7d#no-back-button
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
This is the identified malicious site and domain
• Domain Report: "hab.me/"
• Sites Report: "https://hab.me/o2iSVZ9"
• IP: 35.190.2.215
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (10:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
show less
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be a ...
show moreA website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "claricom.co/"
• Sites Report: "https://claricom.co/mispromocionesclaro/e794fd34f60d3f6fa9e922c8ed50157d#no-back-button"
"https://claricom.co/mispromocionesclaro/fb6cee0788b0461ef484fda8cf47ae7d#no-back-button"
• IP: 20.83.155.168
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "ofertasparatodos.azurewebsites.net/"
• Sites Report: "https://ofertasparatodos.azurewebsites.net/claro-2/"
• IP: 20.212.64.16
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/11) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "promosdescuentosclaro.azurewebsites.net/"
• Sites Report: "https://promosdescuentosclaro.azurewebsites.net/toinicio.php#no-back-button"
• IP: 20.212.64.3
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/04) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "facturadescuentclr.azurewebsites.net/"
• Sites Report: "https://facturadescuentclr.azurewebsites.net/"
• IP: 40.69.106.98
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/05/26) and time (12:00:00)
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "comcel-portalenlinea.descuentosya.cc/"
• Sites Report: "https://comcel-portalenlinea.descuentosya.cc/index.php?sid=QU14TGd4ZHRVaktxR0ZWOHR5a21LN0hDWnI4ZmJRSTd6REJMY20yR1ZmND0="
• IP: 181.41.201.36
• Time Zone: (GMT-05:00) Bogota, Lima, Quito, Rio Branco
• The date (2025/06/10) and time (12:00:00)
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://hab.me/5X2fYVP -> https://portaldepagospromociondelmes.com/descuentosespeciales/9bc5c243cdc1136ed7683a341f99e68a#no-back-button
This is the identified malicious site and domain
• Domain Report: "hab.me/"
• Sites Report: "https://hab.me/5X2fYVP"
• IP: 35.190.2.215
Note: It is only visible in the browser engine of the mobile agent and the URL is dynamic.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "ofertasparatodos.azurewebsites.net/"
• Sites Report: "https://ofertasparatodos.azurewebsites.net/claro-2/"
• IP: 20.212.64.16
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "postpagoapp.com/"
• Sites Report: "https://postpagoapp.com/"
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "portallpago-claro.com/"
• Sites Report: "https://portallpago-claro.com/index.php?sid=a1QrR0JLMEE3K21xNzZIdUhCam5UZm42M3d4RzkzM0ZnMnB3Sk03YVVLND0&code=ANF8E1892"
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "bclagportaldscpagos.com/"
• Sites Report: "https://bclagportaldscpagos.com/index.php?sid=ZjFSbUxwRkV2N1VRUnI0bnIrS2lFVzYzY0daTkJTOER5Mmp1aFRCSUxjQT0="
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "comcel-portalenlinea.descuentosya.cc/"
• Sites Report: "https://comcel-portalenlinea.descuentosya.cc/index.php?sid=QU14TGd4ZHRVaktxR0ZWOHR5a21LN0hDWnI4ZmJRSTd6REJMY20yR1ZmND0="
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This bookmark redirects to phishing site
https://ssly.be/93udozp -> https://comcel-portalenlinea.descuentosya.cc/index.php?sid=QU14TGd4ZHRVaktxR0ZWOHR5a21LN0hDWnI4ZmJRSTd6REJMY20yR1ZmND0=
This is the identified malicious site and domain
• Domain Report: "ssly.be/"
• Sites Report: "https://ssly.be/93udozp"
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "tuappclaro.com/"
• Sites Report: "https://tuappclaro.com/"
Note: Only visible in the browser engine of the mobile agent. VPN is required, because if you do not have vpn redirects to the Facebook page.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
To whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal ...
show moreTo whom it may concern,
A website has been identified that impersonates the CLARO Colombia portal, causing customers to be affected because it captures their credit card information, personal information or other types of data.
• Original and Valid Site: "https://portalpagos.claro.com.co"
This is the identified malicious site and domain
• Domain Report: "factura-portalpagos.pagos-en-linea.org/"
• Sites Report: "https://factura-portalpagos.pagos-en-linea.org/index.php?sid=a0NHdUhCc3hteHhHOVZ6Q0MwekJXcm1aMHRWZWxYSnZqWEJ4WkU3RE0zRT0"
Note: It's only visible in mobile agent browser engine.
I remain attentive to your comments, thank you
Regards,
Saludos,
Analista de Ciberseguridad
Fabián David González Romero
[email protected]show less
Phishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.