Security Scan Report: bnpbancoit.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://bnpbancoit.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake Banco BPM login page hosted on a free Firebase subdomain with a deceptive bnpbancoit hostname and cloned bank branding; no form captured, but the site impersonates a bank and should be avoided and reported.

Risk Factors (5)
Impersonation of Banco BPM, a brand the page is not affiliated with, on a non-official domain
Deceptive hostname combining BNP and Banco BPM names under a free Firebase hosting subdomain
Unranked domain with unknown subdomain creation date on shared hosting
Unconfigured template page title ("HTML Editor - Full Version") indicating a cloned/copy-pasted kit
Login/ACCEDI call-to-action present without any legitimate same-origin authentication backend
Domain age information unavailable

Details

Page Title

HTML Editor - Full Version

Scan Type

public

Domain Name Analysis

The domain name 'bnpbancoit.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'bnpbancoit'. Its registrable label 'firebaseapp' stretches across 11 characters split between 5 vowels and 6 consonants. Word splitting yields 3 words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bnpbancoit.firebaseapp.com/

Page Load Overview

0.22s
Total Load Time
49 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:356 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service100% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
100%
finance banking
91%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
21--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15363F23A0ABD6B84AC2854108C9BF7D5ED8997E5934E54A5FE02803EA8CF545FC3C47A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:3V2cXT2k1F8d3lzFehPdngq652iPFLjTSrruzP:l2cCkEd3lzFehJ6d7SW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67196:eWUAgYhBCCYCAAmBmpEBAK5iAQtxCCCM5w6QoMFJBpdVigURBllCTIQ0IbWEBsNKZQRDBCRG4OKKICIQwwBEBIRSQjuggwAO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e70000ffffffff
Perceptual Hash:b333b3b333624c8c
Difference Hash:0c08080d00000000
Wavelet Hash:e7e7e70000000000
Color Hash:#bf8c40

Other Hashes

Crop Resistant:0c08080d00000000

Scan History

Scan history not available

Unable to load historical scan data