Security Scan Report: bmrqdvtq.web.app

Redirected to:
https://nbg-ibank.ussvn.xyz/
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://bmrqdvtq.web.app

Effective URL:
https://nbg-ibank.ussvn.xyz/
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Domain 'nbg-ibank.ussvn.xyz' wears a bank e-banking name on an unrelated .xyz host and redirected from a disposable web.app subdomain — a deceptive hostname consistent with a bank phishing lure. It timed out, so nothing was served; do not trust or interact with it.

Risk Factors (4)
Bank-branded hostname ('nbg-ibank') on a non-bank, unrelated .xyz domain — deceptive hostname / brand impersonation
Redirect from a free hosting subdomain (bmrqdvtq.web.app) to a previously unrelated domain, a common throwaway-phishing pattern
Unranked/unknown-reputation final domain
Host unreachable, so the page's true purpose cannot be verified
Domain age information unavailable

Details

Page Title

nbg-ibank.ussvn.xyzother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'bmrqdvtq.web.app' on the application-focused generic top-level domain (.app) with subdomain 'bmrqdvtq'. The second-level label 'web' is 3 characters long split between 1 vowel and 2 consonants. Splitting it apart reveals 1 word: web. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bmrqdvtq.web.app

Page Load Overview

30.51s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:753 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software80% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
80%
documentation technical
56%
adult content
43%
finance banking
38%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2207.207.210.107Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2207.207.210.229Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
83--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B1048F77329A063D86558498E45B43099F20B143F506C9BCB9BCBAD8BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:S/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPF2bMy8Oldb:ThoCl8Bqzzbs6okSCggcpst2eA1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188036:wEZCEkPiwoKIV2CFQIVgJwRCMAEoC5WMAwLAkFU4VKnBMRoQlgczJQiIOJjRCKAI3lFYYQBEFITJhCSGTIVFEYsGCoEKyUgI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3d3ffffff
Perceptual Hash:b1319accccb33365
Difference Hash:0018181616000000
Wavelet Hash:0f0f0707033f0f0f
Color Hash:#2d8649

Other Hashes

Crop Resistant:0018181616000000

Scan History

Scan history not available

Unable to load historical scan data