halifaxrefugeeclinic.
halifaxrefugeeclinic.org presents as a long-established Nova Scotia refugee legal-aid site but 6 antivirus engines flagged the URL as malicious.
At a glance
Antivirus · registration · identity- 6 engines classified the URL as malicious and 0 as suspicious; 53 returned harmless, 33 returned undetected, and 0 returned no usable result.
- The domain was registered Apr 26, 2005 and was 21 years old at scan time.
- Operator identity: Claimed Only. Contact details are present but not independently verified
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The site presented a valid TLSv1.3 certificate at scan time.
Intelligence
The site displays the Halifax Refugee Clinic branding, mandate text, and contact details that match open-web sources, yet antivirus detection triggered a malicious classification focused on phishing or credential theft.
Evidence Map
One or more reputation sources recorded a concern
Contact details are present but not independently verified
No usable behavior observation was saved
The domain was registered Apr 26, 2005 and was 21 years old at scan time.
- 16 antivirus engines flagged the URL as malicious
- 2Contact email uses a free-mail provider rather than a domain address
- 1Domain registered April 2005 (21 years old)
- 2Valid TLSv1.3 certificate presented
- 3Phone number and postal address listed on page
- 4Hosting IP shows 0/100 abuse-confidence score
Site presentation and visitor journey
The page at http://halifaxrefugeeclinic.org/ loads with the title "Home - Halifax Refugee Clinic" and describes a non-profit legal-aid organization that provides refugee-status representation in Nova Scotia. The visible content includes mandate language, a donation call-to-action, navigation links for About, Services, Resources, Volunteers, News and Contact, plus a postal address at 5538 Macara Street, Halifax, NS and the phone number +1 (902) 422-6736.
Observed contact and domain details
Contact fields show one free-mail address (halifaxrefugeeclinic@gmail.com), one phone number, and one postal address; no domain-hosted email addresses appear. The domain itself was registered on 26 April 2005 and is now 21 years old, with registration privacy marked as not observed.
Technical signals at scan time
The site served a valid TLSv1.3 certificate and performed a single same-domain redirect hop. No login form, countdown timers, or deceptive notification-bait copy were present. The hosting IP carried an abuse-confidence score of 0/100 from four reports. Google Safe Browsing returned no listed threat categories.
Antivirus classification
Six antivirus engines classified the URL as malicious while zero engines marked it suspicious; 53 engines returned harmless and 33 returned undetected.
Web Research
Open-web sources describe the Halifax Refugee Clinic as a non-profit created in 2000 by lawyer Lee Cohen, QC, offering legal representation for refugee claimants in Nova Scotia. The same phone (+1 (902) 422-6736) and physical address (5538 Macara Street, Halifax) appear consistently on the site and on the ns.211.ca community-services profile.
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 16 antivirus engines flagged the URL as malicious
- 2Contact email uses a free-mail provider rather than a domain address
1 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Domain registered 2005-04-26 (21.2 years old)
- Physical address 5538 Macara Street, Halifax, NS B3K 1V9 and phone +1 (902) 422-6736 match ns.211.ca profile
- Site content describes mandate to provide legal representation for refugee claimants in Nova Scotia
- WHOIS privacy-protected: false; registrar Netregistry Wholesale Pty Ltd listed
- SSL valid (Let's Encrypt), no redirects, no login form, no countdowns
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 7:03 PM UTCIdentity
6 facts- Operator
- Claimed Only
- On-domain email
- Not observed
- Other email
- 1 address
- Phone
- 1 number
- Postal address
- 1 address
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 21 years old
- Registered
- Apr 26, 2005
- Registrar
- Netregistry Wholesale Pty Ltd
- Expires
- Apr 26, 2028
- WHOIS updated
- May 1, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Let's Encrypt · YE1
- Certificate subject
- halifaxrefugeeclinic.org
- Certificate valid from
- Jun 16, 2026
- Certificate valid to
- Sep 14, 2026
- Network address
- 162.159.135.42
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- WordPress
- IP reputation
- 0% confidence · 4 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- halifaxrefugeeclinic.org
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 4
What to do
Do not enter any credentials or personal information; treat the site as high-risk for phishing until the antivirus flags are resolved.
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
Final Verdict
Why this verdict
The verdict is malicious because 6 antivirus engines flagged the URL while the domain is 21 years old, presents a valid TLS certificate, and shows a legitimate non-profit archetype with no login form or countdown timers.
Do not enter any credentials or personal information; treat the site as high-risk for phishing until the antivirus flags are resolved.
Key evidence
- 16 antivirus engines flagged the URL as malicious
- 2Contact email uses a free-mail provider rather than a domain address
- 36 engines classified the URL as malicious and 0 as suspicious; 53 returned harmless, 33 returned undetected, and 0 returned no usable result.
Safety FAQ
Is halifaxrefugeeclinic.org safe to use?+
The verdict is malicious because 6 antivirus engines flagged the URL while the domain is 21 years old, presents a valid TLS certificate, and shows a legitimate non-profit archetype with no login form or countdown timers.
What should I do about halifaxrefugeeclinic.org?+
Do not enter any credentials or personal information; treat the site as high-risk for phishing until the antivirus flags are resolved.
How old is halifaxrefugeeclinic.org?+
halifaxrefugeeclinic.org is 21 years old and was registered apr 26, 2005.
What if I already interacted with halifaxrefugeeclinic.org?+
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 7:03 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.