this.ca - URL scan, 18 Aug 2026
MalwareAnalyzer by Cyble scanned this.ca and returned a unknown verdict (score -12). The page resolved to 52.40.42.113 on Amazon Technologies Inc. in US. 3 domains and 1 IP were contacted, over 1 HTTP request. 101 malware samples communicate with this URL. This is a point-in-time observation from 18 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://this.ca/ - Domain: this.ca · IP: 52.40.42.113 · AS16509 · US
- Server: openresty
- Page title: this.ca for sale | Spaceship.com
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 13 03: · subject CN=this.ca
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-18 10:50:03 UTC
Malware communicating with this URL (101)
These samples were observed contacting or being served from this.ca. Each links to its full analysis.
- 305e70e676c1c6166f2d5ae656bd3383b6e281327f3c3fefbb80220d57f07853 - referenced ·
305e70e676c1c6166f2d5ae656bd3383· first seen 2026-08-18 - 44f6638002da077eabb8925a44795e6d91f7231bc1ddffad320812a5ef1e6800 - referenced ·
44f6638002da077eabb8925a44795e6d· first seen 2026-08-18 - b972f03cbd8addffe3c08ecaa0d1738cb7c352b0012eda00b9974db2d2fb9d73 - referenced ·
b972f03cbd8addffe3c08ecaa0d1738c· first seen 2026-08-17 - 0d1ad591fd199bc8623c6f87f84f2798370eee1e9217e22dec2b21aec89bc738 - referenced ·
0d1ad591fd199bc8623c6f87f84f2798· first seen 2026-08-17 - cd27f1db1a531f24c2386d0410d8ca601f85a489f8b824522f79f55c897afc13 - referenced ·
cd27f1db1a531f24c2386d0410d8ca60· first seen 2026-08-17 - 12765aebbdace3fa4083ba5917fa34583421e12d70acd9ca5e5724ab089623c7 - referenced ·
12765aebbdace3fa4083ba5917fa3458· first seen 2026-08-17 - d25296b3cd46ca371263d21b7df23e4dd58f65870c76c78d66f55316d45e6e6a - referenced ·
d25296b3cd46ca371263d21b7df23e4d· first seen 2026-08-17 - 9dcbdccc85ff0d123bd41349966947da4052cf2b0c8ccce55a8939c07024257d - referenced ·
9dcbdccc85ff0d123bd41349966947da· first seen 2026-08-17 - 946f75134b164a6d9b8e9bfed53d419eeca9e446d72e62b16798c6785ef68c89 - referenced ·
946f75134b164a6d9b8e9bfed53d419e· first seen 2026-08-17 - 7317e8bd604e63112229d85d6f6244853dd5d210317fab061149ca120584f9e1 - referenced ·
7317e8bd604e63112229d85d6f624485· first seen 2026-08-17 - f9819cbebe0eebfdb0c99b2ddf3c37f91bac04f75138ecfe76e24e8e6a3497b0 - referenced ·
f9819cbebe0eebfdb0c99b2ddf3c37f9· first seen 2026-08-17 - 1c2898835522fdc6b8f8ed5b8d56958b9a10a25b8b1ee81c1449368c8fb656d4 - referenced ·
1c2898835522fdc6b8f8ed5b8d56958b· first seen 2026-08-17 - 24aed64698adc85db6d4838030811eaa20f6ad20721cde88add1b462ce35734b - referenced ·
24aed64698adc85db6d4838030811eaa· first seen 2026-08-17 - b1bd2bda8237e92f2e33c4649e10bba4d1778936c0b6367434a7bc9e6ef127dd - referenced ·
b1bd2bda8237e92f2e33c4649e10bba4· first seen 2026-08-17 - e327f30c5088d00138944722c45ade18a23f96f4c272710aa8745f8602893394 - referenced ·
e327f30c5088d00138944722c45ade18· first seen 2026-08-17
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 52.40.42.113 - AS16509 Amazon Technologies Inc. (United States)
Observed indicators
- this.ca
- forsale.spaceship-cdn.com
- www.spaceship.com
- 52.40.42.113
- https://this.ca/
- https://forsale.spaceship-cdn.com/
- https://forsale.spaceship-cdn.com/static/latest/5.latest/main.css
- https://forsale.spaceship-cdn.com/static/assets/fonts/d859cbb66446191425f0.woff2
- https://forsale.spaceship-cdn.com/static/assets/fonts/355eece7fa95947e67a5.woff2
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/images/bg-1_dark.svg
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/images/bg-1_dark_mobile.svg
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-57x57.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-60x60.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-72x72.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-76x76.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-114x114.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-120x120.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-144x144.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-152x152.png
- https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-180x180.png
Other scans of this.ca (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about this.ca
- Is this.ca safe?
- The scan of this.ca on 18 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with this.ca?
- 101 analysed samples communicate with this URL.
- How was this.ca checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of this.ca
Scanned on MalwareAnalyzer by Cyble · Open interactive scan