public company · US

BANK OF NOVA SCOTIA

Primary official domain
scotiabank.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
1
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
2
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
bankofnovascotiascotiabank
Label aliases
BANK OF NOVA SCOTIA · scotiabank
Official domains
scotiabank.com (all)
Generated spellings
314 tracked · 3 observed somewhere · 311 not observed (all)

Official domains and email policies

Domains reviewed as belonging to BANK OF NOVA SCOTIA. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingLast check
scotiabank.com
primaryReviewed —
Portfolio directory (financedb_ticker_A)rejectDirectCould not fully evaluate (sender-specific macros)Aggregate reports requested (rua)2026-10-19 00:41 UTC
Records and check details

Published records

DMARC (_dmarc.scotiabank.com)
v=DMARC1; p=reject; fo=1; rua=mailto:…@emaildefense.proofpoint.com; ruf=mailto:…@emaildefense.proofpoint.com;
SPF (scotiabank.com)
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • Could not fully evaluate: the record uses sender-specific macros (for example %{i}) whose targets depend on each sending host, so a static check cannot evaluate them and this is not reported as a valid record.
  • -all: unlisted hosts fail SPF.
  • At least 1 DNS-querying term (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.

Observations

  • SPF (sender-specific): scotiabank.com: include:%{ir}.%{v}.%{d}.spf.has.pphosted.com uses a sender-dependent macro

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.scotiabank.com: ok, 1 DMARC record

Recent checks

  • 2026-10-19 00:41 UTC: DMARC reject; SPF could not fully evaluate

Assessment posture-v2. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.