ScanMalware.com

Security Scan Report: nexoexterior.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6659079-6185-4c39-ab53-4fd5522d591cDomain and IP registration (RDAP)/api/v1/rdap/b6659079-6185-4c39-ab53-4fd5522d591cHow often this domain was scanned/api/v1/domain/stats/nexoexterior.firebaseapp.comScan history for this domain/api/v1/domain/history/nexoexterior.firebaseapp.com?limit=15
This website contacted 6 IPs in 2 countries across 4 domains to perform 114 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://nexoexterior.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Replica of Banco Exterior's site served from a free firebaseapp.com subdomain with DevTools/copy blocking and no forms captured — treat as an impersonation host and avoid entering any data.

Risk Factors (4)
Impersonation of Banco Exterior's brand on a non-official domain (firebaseapp.com)
Full-site clone of a financial institution hosted on free shared hosting
DevTools and source-view blocking / copy prevention, an anti-analysis technique
Unranked domain with no verifiable subdomain age (platform tenant, could be created recently)
Domain age information unavailable

Details

Page Title

Inicio - Banco Exterior

Scan Type

public

Domain Name Analysis

You're looking at domain 'nexoexterior.firebaseapp.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'nexoexterior'. Count 11 characters in 'firebaseapp' split between 5 vowels and 6 consonants. It segments into three words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nexoexterior.firebaseapp.com/

Page Load Overview

11.20s
Total Load Time
11.5 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:5,345 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking90% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
90%
corporate business
87%
cryptocurrency blockchain
66%
technology software
65%
government public service
45%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
19200.16.95.182Venezuela
AS262176BANCO EXTERIOR
19192.178.183.100Google · CDNUnited States
AS15169Google LLC
19142.251.13.138Google · CDNUnited States
AS15169Google LLC
1934.96.90.98Google · CDNKansas City, Missouri, United States
AS396982Google LLC
19142.251.13.101Google · CDNUnited States
AS15169Google LLC
1146--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17344F8717A49243B213F238A65226F1D70C7D399CF0354E0B2FA83699BB1DD0B6DB259

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:PUagqOq0JU40JryabLYwZzae0wka9IAg0pLLjmOuS/Jrv6W2NQMTss6jvgqKYAgw:PUagqB27

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:271010:AgQggNoCQgs4YjBUFAVgMiAzoEdgIg2zMR10cDgcHJmgEAAoEQqSRCQYxEgZABYAoBAHASUks4IsQQClgRYSVsxgiDgAQGRg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data