Security Report: redclaymasonry.ca - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/66ffa37a-aadd-4a3e-8325-b5ef7f2d59f3 Domain and IP registration (RDAP)/api/v1/rdap/66ffa37a-aadd-4a3e-8325-b5ef7f2d59f3How often this domain was scanned/api/v1/domain/stats/redclaymasonry.ca Scan history for this domain/api/v1/domain/history/redclaymasonry.ca?limit=15

This website contacted 15 IPs in 3 countries across 12 domains to perform 78 HTTP transactions. The main domain is redclaymasonry.ca and was registered 3 years 7 months ago.

Submitted URL: https://redclaymasonry.ca

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking Toronto masonry site that has been compromised and now serves a ClickFix/EtherHiding kit: obfuscated blockchain-driven script plus a fake 'Human Verification' overlay telling Windows users to open Terminal. Do not follow its instructions.

Risk Factors (5)

Known ClickFix/EtherHiding malicious kit injected into the page (analyst-vetted kit roster)

Blockchain-contract-driven second-stage loader hidden in obfuscated JavaScript

Repeated CRITICAL IDS alerts for EtherHiding exfiltration and exploit-kit check-in

Fake 'Human Verification' / Cloudflare-style overlay instructing users to open Windows Terminal

Third-party resource ncheck-brows.beer tagged IClickFix and the site's own domain tagged iclickfix malware

Domain age information unavailable

Details

Page Title

Red Clay Masonry | Professional Masonry Contractors Toronto Ontario

Scan Type

public

Favicon Hash

MMH3: 1544620767

MD5: 809a2b95644c780020749faab3f2f6c9

Domain Name Analysis

The domain 'redclaymasonry.ca' uses the Canadian country-code top-level domain (.ca) without a subdomain. Count 14 characters in 'redclaymasonry' holding four vowels versus 10 consonants. Tokenizing the label suggests 3 words: red, clay, masonry. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.70s

Total Load Time

14.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:14,830 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical81% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

81%

adult content

72%

blog personal website

63%

government public service

55%

download file sharing

52%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	72.62.207.142	Phoenix, Arizona, United States	AS47583Hostinger International Limited
5	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	142.251.110.97Google · CDN	United States	AS15169Google LLC
5	142.251.14.95Google · CDN	United States	AS15169Google LLC
5	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	92.113.16.35	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
5	216.239.32.36Google · CDN	United States	AS15169Google LLC
78	15	-	-