Security Scan Report: casinosonline-canada.ca

Redirected to:
https://www.casinosonline-canada.ca/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 8 domains to perform 22 HTTP transactions. The main domain is casinosonline-canada.ca and was registered 10 years ago.

Submitted URL: https://casinosonline-canada.ca

Effective URL:
https://www.casinosonline-canada.ca/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised WordPress casino site serves ClickFix/ErrTraffic malware via fake Cloudflare overlay, critical YARA/IDS hits, and EtherHiding exfiltration; do not interact.

Risk Factors (8)
Known malicious kit ErrTraffic/Exvicy injected WordPress loader (CRITICAL phishing/malware)
Known malicious Windows ClickFix Win+X Terminal overlay kit (CRITICAL phishing/malware)
Critical YARA rule hits for both kits
Critical IDS alert ET MALWARE EtherHiding Exfil M2
Blockchain RPC/EtherHiding activity to rpc-mainnet.matic.quiknode.pro
Threat-intel reports on primary domain and loaded third-party resources
Compromised WordPress page with injected fake security verification overlay
Fake Cloudflare verification social-engineering users into terminal command execution
Domain age information unavailable

Details

Page Title

Best Online Casinos Canada 2026 - Top-Rated Online Casino Games

Scan Type

public

Domain Name Analysis

Within the Canadian country-code top-level domain (.ca), 'casinosonline-canada.ca' is registered without a subdomain. The second-level label 'casinosonline-canada' is 20 characters long with 9 vowels and 10 consonants; it also includes 1 hyphen. Splitting it apart reveals 3 words: casinos, online, canada. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://casinosonline-canada.ca

Page Load Overview

1.26s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-Ca
Text Length:869 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
44%
cryptocurrency blockchain
34%
documentation technical
31%
gambling betting
31%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
2104.21.95.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
2216.239.32.36Google · CDNUnited States
AS15169Google LLC
2211--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A65455DE96A311497607E5792BFBE6507335A143CA0EEDBC7E8D6244CF8828458E1FC8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:XL4UOC/vtBLeP5uhcg8Tvg8d/h4FmsH9Ma:XvOC/vtxeP5uhcg8Tvg8d/h4FmsH9P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:284517:2YA3gSIQLAQQ8fATiQMArgAJ8qBjCyCTQ4pCwJaQA4PQRHuCbRJ4DiAigAAIEBAeQcEJYIAGQ7KF74BBBFiMIOJgIxIBQFyg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3ffffffffffff
Perceptual Hash:b131313166cecece
Difference Hash:9e9e200000000000
Wavelet Hash:c0c0c0c00f0f0f0f
Color Hash:#311f93

Other Hashes

Crop Resistant:9e9e200000000000

Scan History

Scan history not available

Unable to load historical scan data