metaottawa.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of metaottawa.com
metaottawa.com appears to present itself as a news-style website. Its page metadata describes coverage of world news, business, technology, and sports, suggesting a general-interest publishing or content portal rather than a single-purpose service or storefront.
However, the visible page content at the time of this scan does not resemble a normal news homepage. Instead, it appears to expose a large block of PHP or WordPress-related code, including references to plugin paths and remote communication logic. Based on the available data, this may indicate a misconfigured site, a compromised content-management installation, or a page that is not functioning as intended. No clear operator identity is evident from the provided scan details.
Safety Assessment for metaottawa.com
Multiple security signals raise concern for this domain at the time of this scan. The site was flagged by 12 out of 90 security engines, and at least one major threat database listed it for unwanted software. Another blacklist source also reported a generic malicious-object classification. In addition, the screenshot shows raw server-side code rather than a legitimate rendered webpage, which may be consistent with a compromised or improperly exposed web application.
The domain also links out to numerous gambling-related external websites, which does not align well with the stated news-oriented metadata and may indicate injected content or unauthorized modifications. Although one malware scan reported no flagged files in its limited crawl, that clean result is outweighed by the broader multi-engine detections and blacklist listings. The published trust score provided with this scan is 5/100, which is consistent with a high-risk assessment.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate that was set to expire on 2026-12-01, and it appears to be served by an Apache web server hosted on an IP associated with TELUS Communications Inc. in Dallas, United States. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From a security perspective, the most notable issue is the apparent exposure of PHP/WordPress code in the page output, including plugin-related paths and remote task logic. That kind of output may suggest server misconfiguration, source disclosure, or compromise of a WordPress environment. The domain is relatively new at about 476 days old and is not ranked in Tranco, which provides little reputation support.
Share your experience with this website. Was it safe? Did you encounter any issues?