Security Scan Report: www.bigtonypoker.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 49 HTTP transactions. The main domain is bigtonypoker.com and was registered 13 years ago.

Submitted URL: https://www.bigtonypoker.com/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Compromised WordPress site (Big Tony's Poker) serving ErrTraffic/Exvicy ClickFix malware: fake 'Human Verification' overlay plus EtherHiding exfiltration to ClearFake infrastructure. Do not visit.

Risk Factors (7)
Analyst-vetted ErrTraffic/Exvicy WordPress injected loader (CRITICAL phishing) confirmed by YARA
Analyst-vetted ClickFix Win+X 'Human Verification' social-engineering kit (CRITICAL) served to Windows visitors
Primary domain flagged as ClearFake malware by threat intel
Page loads scripts/resources from ClearFake and EtherHiding infrastructure (cloudflare-check.net, browseid.codes, 178.16.52.101)
CRITICAL IDS alerts for EtherHiding exfiltration and Spamhaus-listed inbound traffic
Obfuscated runtime code generation (14 Function() constructor calls) consistent with the injected loader
Content hijacked with unrelated third-party spam/casino/pharmacy backlink spam
Domain age information unavailable

Details

Page Title

Big Tony's Poker Site – A Place For Poker "Passionista"

Scan Type

public

Domain Name Analysis

The domain name 'www.bigtonypoker.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The registrable portion 'bigtonypoker' spans 12 characters holding 4 vowels versus eight consonants. Breaking it apart gives 3 words: big, tony, poker. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.bigtonypoker.com/

Page Load Overview

2.05s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,823 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
68%
cryptocurrency blockchain
61%
adult content
60%
entertainment media
56%
news media journalism
53%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.21.42.196Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7172.67.165.142Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
497--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19FB3D73363F051B7221393D15660BF299DC3921FCA211AAEF3FE42C0AF59DA7152761A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7apdvKqFuB+ee2quuTyrBwbKcxbrmbvUbJ0bDKbdIbGVbDvblnbobMbkbCbBbw1f:efFuB6yDwOwqfVtCfh2B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:108487:JSAJXBWwQsMBpyRWAAARFQY1II01nwTgIwKE5EEQMmqJxJBcULO4yAVAFgM4JKgOpMxAlXJgRVpQErAqYIWEIUpIvRAAATIM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001010101010101
Perceptual Hash:aa5555557755dc04
Difference Hash:0001010909010101
Wavelet Hash:0e0f1f0f0d1d0f0f
Color Hash:#86802d

Other Hashes

Crop Resistant:0001010909010101

Scan History

Scan history not available

Unable to load historical scan data