Security Scan: Ottawa Capital Homes

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1039adb4-cd74-48d8-a9e9-5f6c00a8113a Domain and IP registration (RDAP)/api/v1/rdap/1039adb4-cd74-48d8-a9e9-5f6c00a8113a Certificate Transparency/api/v1/ct/ottawacapitalhomes.com How often this domain was scanned/api/v1/domain/stats/ottawacapitalhomes.com Scan history for this domain/api/v1/domain/history/ottawacapitalhomes.com?limit=15

This website contacted 16 IPs in 4 countries across 12 domains to perform 45 HTTP transactions. The main domain is ottawacapitalhomes.com and was registered 18 years ago.

Submitted URL: https://ottawacapitalhomes.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised legitimate site serving ClickFix malware: analyst-vetted AMOS stealer and Win+X Terminal overlay kits, 6 CRITICAL YARA hits, 8 CRITICAL IDS alerts and EtherHiding blockchain C2. Do not visit.

Risk Factors (8)

Analyst-vetted ClickFix malware kits (AMOS stealer + Win+X Terminal overlay) injected into the page

Six roster-anchored CRITICAL YARA rule matches on the page HTML

8 CRITICAL network IDS alerts for EtherHiding exfiltration and ClickFix C2 domains

EtherHiding: script resolves its next stage from a blockchain smart contract via RPC (rpc.ankr.com, polygon.gateway.tenderly.co)

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare branding

Threat-intel match on the primary domain (unknown loader/malware) and on third-party resource 178.16.52.101 (EK clearfake, 2 feeds)

Legitimate business domain repurposed to serve injected gambling content and a stealer loader

Unranked attacker script hosts (browse-codes-enter.beer, fliorkfliixsable.pro, wuntred.com) contacted via sendBeacon

Domain age information unavailable

Details

Page Title

Ottawa Capital Homes

Scan Type

public

Favicon Hash

MMH3: -14095962

MD5: 0c772833f1307f45914d864372795d85

Domain Name Analysis

The domain 'ottawacapitalhomes.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'ottawacapitalhomes' covers 18 characters containing 8 vowels alongside ten consonants. Breaking it apart gives 3 words: ottawa, capital, homes. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.70s

Total Load Time

642 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:19,838 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media87% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

87%

gambling betting

84%

corporate business

53%

technology software

37%

finance banking

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	173.209.51.66	Canada	AS36666GloboTech Communications
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	92.243.74.51Cloudflare · WAF	Singapore	AS203273NetCrafters OU
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
2	104.21.42.198Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	142.251.127.138Google · CDN	United States	AS15169Google LLC
45	16	-	-