Security Scan Report: refresh.scotiabank.com

Redirected to:
https://auth.scotiaonline.scotiabank.com/online?oauth_key=XXJqp5GZ7Tw&...
Submitted: Oct 11, 2026, 10:16:15 PMCompleted: Oct 11, 2026, 10:16:58 PMpubliccompleted

This website contacted 48 IPs in 5 countries across 29 domains to perform 103 HTTP transactions. The main domain is auth.scotiaonline.scotiabank.com and was registered 30 years ago.

Submitted URL: http://refresh.scotiabank.com/

Effective URL:

https://auth.scotiaonline.scotiabank.com/online?oauth_key=XXJqp5GZ7Tw&...
Redirected

The Cisco Umbrella rank of the primary domain is #63,739 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Authentic Scotiabank sign-in: both refresh.scotiabank.com and the final auth.scotiaonline.scotiabank.com URL are subdomains of the bank's 30-year-old official domain, with a same-organization SSO form and no threat-intel, YARA or phishing signals.

Safety Factors (4)
30-year-old domain (registration 1996-04-09) owned by the brand it displays
Cross-origin form posts to auth.scotiaonline.scotiabank.com, a same-organization SSO endpoint, not an external third-party host
No credential exfiltration, no disguised password fields, no payment fields
Cisco Umbrella top-100K ranking with clean threat-intelligence and YARA results
Domain age information unavailable

Details

Page Title

Sign in | Scotiabank

Scan Type

public

Domain Name Analysis

The domain name 'refresh.scotiabank.com' uses the commercial generic top-level domain (.com) and includes subdomain 'refresh'. Its registrable label 'scotiabank' stretches across 10 characters containing 4 vowels alongside six consonants. Tokenizing the label suggests 1 word: scotiabank. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://refresh.scotiabank.com/

Page Load Overview

7.90s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,808 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service73% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
73%
blog personal website
64%
documentation technical
58%
technology software
57%
corporate business
44%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
923.67.129.30Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
22.17.100.128Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
218.245.45.190Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22.17.100.154Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
252.210.222.87Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
23.254.11.202Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
263.140.62.128Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
254.228.114.238Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2172.64.155.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2108.138.7.36Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10348--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18BF37F9B39A0631BE6D78B19AA527A9875209C4FFD335CEDF14D63784BCC7E28C10609

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vgNl8y209mO5PZ0zln18nQrSvvzEad9NbSwls+C7EW46ZITycr1EUa1s0IJIKIlL:cizIdHW46ZITycr1EUa14G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157670:BPCjKCLwtRbKBy6SyiEAASxY+QQZAcoaoQCiYBUokQBQJEgV2RIDBgsNJHEggQ8sSBJMTTCIoQzAB0Mk8GttEAlcJJMjAABC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fee6fefee6fec404
Perceptual Hash:f3a5d825728dc872
Difference Hash:2a4a4a6a4caa4dc9
Wavelet Hash:3c242c3c263ee604
Color Hash:#6a2d86

Other Hashes

Crop Resistant:2a4a4a6a4caa4dc9

Scan History

Scan history not available

Unable to load historical scan data