Security Scan Report: nexoexterior.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 119 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://nexoexterior.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

A clone of Banco Exterior's banking homepage served from nexoexterior.firebaseapp.com, not the bank's official domain. No credential or payment form is present, but the branding, mismatched host and anti-analysis script blocking warrant caution.

Risk Factors (4)
Brand impersonation of a DIFFERENT entity (Banco Exterior) on a non-official domain
Anti-analysis behavior: F12 / Ctrl+Shift+I / Ctrl+U and copy-content blocking
Unknown-age tenant on a free shared hosting platform namespace (firebaseapp.com)
Use of eval() for dynamic code execution
Safety Factors (5)
No credential-harvesting or payment form present on the page
No Indicators of Compromise matches against the page or its resources
No JavaScript YARA malware patterns and no known phishing-kit roster match
No network-level IDS alerts and no Google Safe Browsing hit
Only benign cross-origin traffic observed (Google Analytics, Broadcom/Symantec telemetry)
Domain age information unavailable

Details

Page Title

Inicio - Banco Exterior

Scan Type

public

Domain Name Analysis

You're looking at domain 'nexoexterior.firebaseapp.com' on the commercial generic top-level domain (.com) and includes subdomain 'nexoexterior'. The registrable portion 'firebaseapp' spans 11 characters split between five vowels and 6 consonants. Segmentation suggests 3 words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nexoexterior.firebaseapp.com/

Page Load Overview

10.08s
Total Load Time
12.2 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:5,472 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking90% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
90%
corporate business
86%
cryptocurrency blockchain
66%
technology software
65%
government public service
45%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
19200.16.95.182Venezuela
AS262176BANCO EXTERIOR
19142.251.110.139Google · CDNUnited States
AS15169Google LLC
19142.251.110.138Google · CDNUnited States
AS15169Google LLC
1934.96.90.98Google · CDNKansas City, Missouri, United States
AS396982Google LLC
19142.251.110.102Google · CDNUnited States
AS15169Google LLC
1196--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E44E9717A4A243B213F238A64226F1D70C7D399CF1354E0B2F683699BB1DD0B6DB259

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:eUagqOX0JU40JuyabtYwZuaeRwkM9IAg0pL2jmOuS/JNv6W6NQMIs86zuCqKRAg2:eUagq927

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:270895:cSQqwZFgjADiERlxtro8FpWigJxgKAIhB5EYjADgIKCgRAQAB5SJ2JXTAEOHkBhzHAoYIYIEJNNIIIIDwIIBxBsmMOx1OCyo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0200ffffffff1f00
Perceptual Hash:8ef12e94639ceb90
Difference Hash:9e8641311b74b361
Wavelet Hash:022e8101ffbf1f00
Color Hash:#3a7853

Scan History

Scan history not available

Unable to load historical scan data