Security Scan: BankID

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3c3397ca-bb96-408e-824c-d56324da2db5 Domain and IP registration (RDAP)/api/v1/rdap/3c3397ca-bb96-408e-824c-d56324da2db5How often this domain was scanned/api/v1/domain/stats/idporten-norge.vercel.app Scan history for this domain/api/v1/domain/history/idporten-norge.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://idporten-norge.vercel.app/page1.7.html

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Unofficial vercel.app page impersonating BankID/ID-porten with a staged 'select your bank' login flow — a phishing step, not a real identity portal.

Risk Factors (5)

Brand impersonation of BankID/ID-porten on an unofficial vercel.app subdomain

Free shared-hosting subdomain with unknown actual creation date

Deceptive hostname embedding a government/banking identity brand name

Multi-step bank-selection form consistent with a credential-phishing kit flow

Hosting platform flagged by IDS as actor-abused infrastructure for this connection

Domain age information unavailable

Details

Page Title

BankID

Scan Type

public

Domain Name Analysis

You're looking at domain 'idporten-norge.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'idporten-norge'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside 4 consonants. Word splitting yields two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.88s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇳🇴Norwegian

Code: no

Confidence:29%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nb

Text Length:830 chars

Detector Agreement:100%

Language mismatch: Declared as nb but detected as no

Website Classification

Primary Category

finance banking80% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

80%

adult content

26%

healthcare medical

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	4	-	-