Security Scan Report: swedbanklv-update.web.app

Redirected to:
https://updatenorway-bankid-souf16130.codeanyapp.com/swedbnk/
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://swedbanklv-update.web.app/

Effective URL:
https://updatenorway-bankid-souf16130.codeanyapp.com/swedbnk/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Disposable Firebase page matching a known bank-phishing kit that redirects into a Codeanywhere container hosting Swedbank/BankID lures. Do not enter credentials; report to the brand and hosting abuse team.

Risk Factors (5)
Known phishing kit family identified by analyst-vetted kit roster (firebase-codeanywhere-redirect-2026-11)
Bank brand embedded in entry hostname on a non-official domain (swedbanklv-update.web.app)
Cross-domain redirect from disposable Firebase Hosting into an ephemeral Codeanywhere container, the exact redirect-stub pattern used to evade takedown
Destination hostname references BankID and banking lures while residing on a developer-container domain unrelated to any bank
Unranked, unattributable hosting tenant with no legitimate purpose visible on the entry page
Domain age information unavailable

Details

Page Title

updatenorway-bankid-souf16130.codeanyapp.comother network

Scan Type

public

Domain Name Analysis

The domain name 'swedbanklv-update.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'swedbanklv-update'. The core label 'web' covers 3 characters split between 1 vowel and 2 consonants. Breaking it apart gives one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://swedbanklv-update.web.app/

Page Load Overview

140.94s
Total Load Time
2 KB
Total Size

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2198.199.109.95San Francisco, California, United States
AS14061DigitalOcean, LLC
42--

Detected Technologies4

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data