Security Scan Report: cuentanexoenlineaus.z5.web.core.windows.net

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is windows.net and was registered 31 years ago.

Submitted URL: https://cuentanexoenlineaus.z5.web.core.windows.net/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Non-official Azure-hosted page impersonates Banco Exterior's 'Exterior NEXO en línea' banking service and loads an unranked external backend; no credential form captured, but brand impersonation on a mismatched unranked host flags likely phishing infrastructure.

Risk Factors (4)
Impersonation of a financial institution's brand on a domain that is not that institution's official site
Hosted as an anonymous tenant subdomain on Azure blob storage (z5.web.core.windows.net) with 'cuentanexoenlineaus' naming
Cross-origin fetch to an unranked, obfuscated-looking external backend (zeabur.app)
Template explicitly frames the visitor as a customer of the impersonated bank ('Contacta a tu Asesor de Negocios para solicitar la afiliación')
Domain age information unavailable

Details

Page Title

Exterior NEXO en línea

Scan Type

public

Domain Name Analysis

The domain name 'cuentanexoenlineaus.z5.web.core.windows.net' uses the network infrastructure generic top-level domain (.net), featuring subdomain 'cuentanexoenlineaus.z5.web.core'. Count 7 characters in 'windows' holding two vowels versus 5 consonants. It segments into one word: windows. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cuentanexoenlineaus.z5.web.core.windows.net/

Page Load Overview

3.31s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:379 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business42% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
42%
finance banking
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3135.130.78.45Azure · CLOUDUnited States
AS8075Microsoft Corporation
343.166.241.168Ashburn, Virginia, United States
AS132203Tencent Building, Kejizhongyi Avenue
62--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6C29E71BE03212832AF05DE911B2B2E6C83EFCDC16266F591F8729157F5D94BBE1290

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:054cerKNKXtWBW+MsP4dM2L4b+rdeSH1XR23b810Yh4w6JBJ:BczocykAl4byHM3bLYh4w2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27789:IhxiBSAAEBN6A1Xil91oJQRBJgkBYyRAgQqgTJEEAHQVJMYpnZB6AcAMIIDCRiyhQoNkIikohAQ5zBpAADhGtAYq5CwhkQIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3c3c3c3c3c3cff
Perceptual Hash:ca07a5adf0adad42
Difference Hash:e0696969e9696969
Wavelet Hash:ff3c3c18183c3c3c
Color Hash:#2d7dd2

Scan History

Scan history not available

Unable to load historical scan data