Phishing detection: store.ww17.jorgazsb.scotiabank-secure.info

Scotiabank
https://store.ww17.jorgazsb.scotiabank-secure.info Access site
Screenshot
Screenshot of store.ww17.jorgazsb.scotiabank-secure.info
Investigate
Domain store.ww17.jorgazsb.scotiabank-secure.info95 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 172.239.194.103
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://store.ww17.jorgazsb.scotiabank-secure.info
urlscan Wayback archive.today
Cert Let's Encrypt
crt.sh Censys Google CT
Phishunt analysis Beta
32 medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchBrand in domain labelBrand + login token
18 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Scotiabank on a combosquatted .info domain with multiple subdomains and the word secure appended, hosted on Akamai infrastructure; flagged by urlscan and consistent with a bank credential harvesting campaign targeting Canadian users.

Brand in domain labelBrand + login tokenurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-22 · confidence 75%
Domain & Network
Whois
Registrar Dynadot Inc
Network
IP 172.239.194.103
Country United StatesUnited States
Hosting Akamai Connected Cloud
ASN AS63949
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Akamai Connected Cloud
abuse@linode.com
Registrar Dynadot Inc
abuse@dynadot.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-19 23:23 UTC  ·  Last refreshed 2026-08-10 13:30 UTC