Security Scan Report: nexoexterior.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 117 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://nexoexterior.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Full replica of Banco Exterior's website hosted off-brand on a free firebaseapp.com subdomain, with DevTools/source blocking. No forms captured, but strong brand-impersonation profile — not the bank's official site.

Risk Factors (4)
Impersonation of Banco Exterior, a different entity's brand, on a domain that is not its official domain
Full clone of a bank's website re-hosted on a free Firebase subdomain
DevTools/right-click/source-view blocking and anti-copy warning (anti-analysis)
Unknown subdomain age on shared hosting platform
Domain age information unavailable

Details

Page Title

Inicio - Banco Exterior

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nexoexterior.firebaseapp.com' is registered, featuring subdomain 'nexoexterior'. The registrable portion 'firebaseapp' spans 11 characters holding five vowels versus six consonants. Breaking it apart gives 3 words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nexoexterior.firebaseapp.com/

Page Load Overview

10.09s
Total Load Time
11.5 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:5,472 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking90% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
90%
corporate business
87%
cryptocurrency blockchain
66%
technology software
65%
government public service
45%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
19200.16.95.182Venezuela
AS262176BANCO EXTERIOR
19192.178.183.138Google · CDNUnited States
AS15169Google LLC
19192.178.183.102Google · CDNUnited States
AS15169Google LLC
1934.96.90.98Google · CDNKansas City, Missouri, United States
AS396982Google LLC
19192.178.183.101Google · CDNUnited States
AS15169Google LLC
1176--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F344F9717A4A243B213F238A64226F1D70C7D399CF1354E0B2F683699BB1DD0B6DB259

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:eUagqOX0JU40JuyabtYwZuaeRwkM9IAg0pL2jmOuS/JNv6W6NQMIs86zuCqKRAgU:eUagq/27

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:270895:cSAqQaVojACiExUFgqo5FoWggIRgaAIxB7lQjBRgIQDATAYQJzgK2LQwA1dRkBhzVIscAAAMAPNABIJK0JIBRJsqGJRVMiyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:a115a5d52384bfcb
Difference Hash:9e8641011b528a4b
Wavelet Hash:00000000ffffffff
Color Hash:#d2692d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data