Skip to main content
Sandfish

Scotiabank

https://sb-invoices.castineapps.com/auth/login/local

WACZ
Groupd0a55f9a-59fd-41fc-8658-103414785b34submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: critical response missing, interaction stalled

Findings
8Critical
Impersonated brand
ScotiabankOther cases impersonating Scotiabank Search for this value.
Submitted URL
http://sb-invoices.castineapps.com/auth/login?1=%2Fauth%2Flogin Search for this value.
Effective URL
https://sb-invoices.castineapps.com/auth/login/local Search for this value.
Domain registration
castineapps.comMore than 90 days oldRegistered 2018-04-18 · Registrar GoDaddy.com, LLC
Language
Detecting...
Network
42 requests across 5 hosts
Cookies
11 observed
Favicon
b1c2d8f0…d3e7f7de Search for this value.
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
6 actions · 2 submissions · stopped: repeated state · download stage: no payload control
  1. 1. fillsucceededtext | LoginForm[username] | Email |
  2. 2. fillsucceededpassword | LoginForm[password] | Password |
  3. 3. submitsucceededSign In
  4. 4. fillsucceededtext | LoginForm[username] | Email |
  5. 5. fillsucceededpassword | LoginForm[password] | Password |
  6. 6. submitsucceededSign In

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
31.0s
Navigation
6 navigations
Engine version
0.4.0
Created
2026-10-20 18:49:29Z
Started
2026-10-20 18:49:30Z
Finished
2026-10-20 18:50:01Z
Archive
619 KB
Favicon source
html_link / favicon-v3
Analysis ID
d9e4f58d-1491...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type