Security Scan Report: scotiabank.forum

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is scotiabank.forum and was registered 2 weeks ago.

Submitted URL: https://scotiabank.forum/

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Six-day-old, unranked domain reusing the Scotiabank name under .forum while serving unrelated Turkish escort content; no forms or malware found in this capture, but the bank-branded hostname is deceptive and bad-faith.

Risk Factors (3)
Deceptive hostname reusing a different entity's brand (Scotiabank) on a non-official domain
Very newly registered domain (6 days) with no reputation and no matching brand authorization
Mismatch between the hostname's brand and the actual page content (escort listings), indicating bad-faith domain use
Safety Factors (4)
No credential, login or payment form detected (0 forms; 0 password/disguised-password/payment fields)
No Indicators of Compromise, YARA malware patterns, IDS alerts or known malicious kit in the scan
No cross-origin credential exfiltration or suspicious JavaScript behavior observed
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Mardin Escort Rehberi ❤️ Güncel Mardin Escort Bayan | Aslanbey

Scan Type

public

Domain Name Analysis

You're looking at domain 'scotiabank.forum' on the .forum top-level domain without a subdomain. The core label 'scotiabank' covers 10 characters with 4 vowels and six consonants. It segments into 1 word: scotiabank. Expect 10 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://scotiabank.forum/

Page Load Overview

0.87s
Total Load Time
31 KB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:4,385 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

blog personal website
84%
entertainment media
80%
adult content
75%
government public service
75%
real estate property
69%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.21.5.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.133.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191D2A766A451AD3E176311E6D3B7330AB3227207CC562812B3ECD5DC5FD8AA884A3F5D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pIkPWZxgo+IHF0lgrdGf40Lasz29YFts/SnCpnLW:7ubp+IHF0ardGfnLasz2otr7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30924:wDAvKCqIQRAH0kAwhH9DBcYTBCRgawaGIADCVEMQ2SqIlRG0gJEKAEDuYqgGIg1jhUSDJgYEAYMxdlRUSKMgLqSBYgDfhgoM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:e4391b13471b6c6e
Difference Hash:0994b42464646464
Wavelet Hash:00ccd1d131313131
Color Hash:#e06c6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data