Highscore 55 · flagged Sunday, September 13, 2026

1-888-608-7975-auth-scotiaonline-scotiabank.com

Appeared in the .com zone on Sunday, September 13, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: scotiabank
+30
lure words (login, verify, secure…)
matched: auth
+26
many hyphens
matched: 6
+6
very long name
matched: 43
+4
brand plus digits
matched: 1-888-608-7975-auth-scotiaonline-scotiabank
+8
random-looking name
matched: H=4.10
+5
Registrar
Nameserver provider
Nameservers
a.dnspod.com, c.dnspod.com
First-day state
empty page
HTTP status
404
Page title
404 Not Found
Has a form
no
Brand echoed
scotiabank

Model opinions

Second opinionlooks like abusetarget: Scotiabankconfidence 85%· claude-opus-5

Name embeds a toll-free phone number plus 'auth-scotiaonline-scotiabank', a hyphen-stuffed brand-squat whose only plausible purpose is to impersonate Scotiabank's online banking/support; currently serves only an nginx 404, so no deceptive page is live yet but the name itself has no legitimate use.

First passlooks like abusetarget: Scotiabankconfidence 85%· claude-haiku-4-5

The domain name is a clear typosquat combining Scotiabank's brand with a fake phone number (1-888-608-7975) and lure word 'auth', designed to impersonate the bank's login portal. Although the page currently shows only a 404 error, the domain infrastructure (DNSpod nameservers, 43-character length, brand+digits+auth pattern) and name construction indicate preparation for phishing; the lack of current content is consistent with a staging setup waiting for credential-capture pages to be deployed.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 13, 2026

Screenshot of 1-888-608-7975-auth-scotiaonline-scotiabank.com taken by the zone census on 2026-09-13

Same data as JSON: /api/zone/domain/1-888-608-7975-auth-scotiaonline-scotiabank.com. This page is not indexed by search engines and does not link to the site it describes.