Security Scan Report: scotiabank.cheap

Redirected to:
https://lotto60.com/partners/
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 7 domains to perform 63 HTTP transactions. The main domain is scotiabank.cheap and was registered 3 years 1 month ago.

Submitted URL: https://scotiabank.cheap/

Effective URL:
https://lotto60.com/partners/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Bank-named domain scotiabank.cheap redirects to an unranked crypto-lottery lead-capture page promising $1M USDT. No credential or payment form and no threat-intel hits, but the deceptive hostname and prize/email lure warrant caution.

Risk Factors (5)
Deceptive entry hostname using a bank's trademark (scotiabank.cheap) that has no relation to the destination content
Unsubstantiated cryptocurrency prize lure ('Win up to $1,000,000 USDT') used to collect personal data
Regional blocking / geo-cloaking on the landing page
No verifiable corporate identity, licensing, or operator details for a site soliciting gambling/prize participation
Footer copyright dated 2026 while the offer is 'launching soon' — internally inconsistent presentation
Safety Factors (4)
No password, disguised-password, or payment fields present (verified form facts: 0/0/0)
No Indicators of Compromise, hunting rule malware patterns, IDS alerts, or Safe Browsing hits
The only outbound submission is a same-destination form post to lotto60.com's own admin-ajax endpoint — no credential exfiltration detected
Email signup includes 'No spam, unsubscribe anytime' and 18+/responsible-play notices
Domain age information unavailable

Details

Page Title

Region Not Available – Lotto 60 — Spin to Win up to $1,000,000 USDT | Launching Soon

Scan Type

public

Domain Name Analysis

You're looking at domain 'scotiabank.cheap' on the .cheap top-level domain with no subdomain. The registrable portion 'scotiabank' spans 10 characters split between four vowels and six consonants. It segments into one word: scotiabank. No strong language cues emerged from the frequency lists.

Screenshot

LOTTO (> Win up to $1,000,000 USDT Lotto60 launches soon. Join the list for early access and a shot at the opening jackpot. First Name* First name Email ID * Email ID Subscribe Now — Enter your...

Page Load Overview

2.84s
Total Load Time
1023 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:360 chars
Detector Agreement:60%

Website Classification

Primary Category

adult content79% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
79%
gambling betting
64%
entertainment media
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.21.231Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5207.207.210.23Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5167.99.154.23North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5138.201.86.122Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
592.113.16.224Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
5207.207.210.36Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5172.67.200.243Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5136.243.42.90Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
6312--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AE23F872795D2413361F1BAED196770C945CA766C900EBFDBCFC602852A0EF622E3768

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:fBZdyp6NjayN7fqfM7iP69ewnGD7s9S8NbOI1a2MlxJ+b0vLB5uT:fhypMOyN7EM7iP6zGD7ss8gI1a2MlxR6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47310:BFg06gAUQZAMiJAkIoBBEEyMYvIgIAUBxCARMRjsBqDngRZghCRYkICE4g1WQ1BgEtKAIxJYhSmwKtQDKIIFETB5QMSCgaIM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000e3e2c60202000
Perceptual Hash:c7963861616fcce1
Difference Hash:3b6c6c48c84848b0
Wavelet Hash:062e7f2f6020207e
Color Hash:N/A

Other Hashes

Crop Resistant:3b6c6c48c84848b0

Scan History

Scan history not available

Unable to load historical scan data