Security Report: squamishadventure.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e5dc75f1-bd9b-41a0-be75-53e9d7beb53f Domain and IP registration (RDAP)/api/v1/rdap/e5dc75f1-bd9b-41a0-be75-53e9d7beb53fHow often this domain was scanned/api/v1/domain/stats/squamishadventure.com Scan history for this domain/api/v1/domain/history/squamishadventure.com?limit=15

This website contacted 24 IPs in 2 countries across 17 domains to perform 146 HTTP transactions. The main domain is squamishadventure.com and was registered 13 years ago.

Submitted URL: https://squamishadventure.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Squamish tourism site compromised with an injected ClickFix/EtherHiding loader — YARA-critical ClickFix WinX kit, blockchain-sourced next stage, and critical EtherHiding IDS alerts. Do not press Win+X or run any 'verification' command.

Risk Factors (5)

Injected Windows ClickFix 'Human Verification' overlay kit (Win+X → Terminal) that leads visitors to run a malicious command

EtherHiding: next-stage payload address fetched from a Polygon smart contract

Obfuscated script concealing known-attacker hosts (1rpc.io, polygon.drpc.org, tenderly gateway)

Malware-distributing script host cloud-browse.codes flagged by 3 corroborating threat feeds

Critical network IDS EtherHiding exfiltration alerts

Domain age information unavailable

Details

Page Title

Your Local Guide to Squamish BC | The Heartbeat | Travel & Tourism - Squamish Adventure

Scan Type

public

Favicon Hash

MMH3: 165036644

MD5: edf72caeaf163ab5d8cf77ba7f217562

Domain Name Analysis

The domain 'squamishadventure.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'squamishadventure' stretches across 17 characters split between 7 vowels and 10 consonants. Breaking it apart gives 2 words: squamish, adventure. Average segment length settles at 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.99s

Total Load Time

3.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,577 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	142.251.20.97Google · CDN	United States	AS15169Google LLC
6	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
6	104.16.138.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	162.159.129.67Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	23.209.208.4Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
146	24	-	-