Security Scan Report: playpokeronlineway.com

Redirected to:
https://www.playpokeronlineway.com/
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 1 country across 13 domains to perform 27 HTTP transactions. The main domain is playpokeronlineway.com and was registered 1 year 1 month ago.

Submitted URL: https://playpokeronlineway.com

Effective URL:
https://www.playpokeronlineway.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

WordPress gambling page serving a ClickFix fake-CAPTCHA that tells users to paste PowerShell commands, with CRITICAL EtherHiding malware-exfil IDS alerts and blockchain C2 connections. Do not interact.

Risk Factors (5)
EtherHiding malware exfiltration alerts (11 CRITICAL) combined with live blockchain RPC connections
Social-engineering fake reCAPTCHA that walks users through running PowerShell commands
Primary domain flagged by threat intel as a malware loader
Obfuscated dynamic code execution (eval) on the page
Unranked domain hosting Indonesian illegal online-gambling content (89% gambling classifier)
Domain age information unavailable

Details

Page Title

Play Poker Online Way

Scan Type

public

Domain Name Analysis

The domain name 'playpokeronlineway.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'playpokeronlineway' spans 18 characters containing seven vowels alongside 11 consonants. It segments into four words: play, poker, online, way. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://playpokeronlineway.com

Page Load Overview

3.32s
Total Load Time
382 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,407 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
89%
technology software
76%
adult content
64%
documentation technical
49%
phishing scam
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
369.163.143.42Hillsboro, Oregon, United States
AS26347New Dream Network, LLC
2172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
235.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
2104.18.10.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
215.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
234.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2713--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E8C26632D2B48CE13A2E876D8594B328A858FB11DF0767D5F0B5A068594DEFB04EB70D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:eR2j3dNJ6Ih7sc8YS40uZdSZUaAhWkWPN:l36cPhZdypaKF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25765:kgpHECAw5BAIj0wgDzAABocgkCoBCQEAhWgNCBCABEEs1JCYSxDklAIQAA5LQACAhD8Cgy3BHSUVjiBAIMgREB+ZQILggAgM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffff00ff
Perceptual Hash:92724143e363bebc
Difference Hash:c8a1384c59698000
Wavelet Hash:0000c787ffbf00ff
Color Hash:#40bfa2

Scan History

Scan history not available

Unable to load historical scan data