Security Scan Report: gotexasholdempoker.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 10 domains to perform 23 HTTP transactions. The main domain is gotexasholdempoker.com and was registered 20 years ago.

Submitted URL: https://gotexasholdempoker.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Cloudflare 'Human Verification' page that tells visitors to paste a terminal command (ClickFix) and loads EtherHiding/malware infrastructure flagged by critical IDS alerts and multi-feed threat intel.

Risk Factors (5)
Fake Cloudflare security-verification overlay copied to impersonate a trusted brand
ClickFix pattern instructing the user to run a manually pasted terminal command
CRITICAL network IDS detections for EtherHiding exfiltration and ClickFix domains
Primary domain itself carries a multi-feed 'clearfake (malware)' threat-intel indicator
Page pulls resources from multiple domains independently flagged as malware/exploit-kit infrastructure
Domain age information unavailable

Details

Page Title

gotexasholdempoker.com -

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'gotexasholdempoker.com' is registered. Its registrable label 'gotexasholdempoker' stretches across 18 characters with seven vowels and 11 consonants. Word splitting yields 5 words: go, texas, hold, em, poker. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gotexasholdempoker.com

Page Load Overview

1.39s
Total Load Time
210 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:975 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
54%
cryptocurrency blockchain
49%
documentation technical
32%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
238--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14293C56113B04AF465BB87FB9A44B21951E3DD13C51436E8B2F3E195F84CEA246F3B0A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ojW+EackRiBmgT0cTrnbO23k95ypdz1nT80nZobXemlUVuXwamzAfN3REl2VZccu:MEackRiBmgT0cTrnbO23k909nZobXem0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93241:XpEkACM+IjAEFEwGQQZDhFBDGGAQj4YrlEAOeQgrJAJFwlceOIoIACgQNIiKdAAEUSAQPDJIEF1iWZBGVEQ4AQiYDJKtggix

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefee6e6fefeff
Perceptual Hash:d555aa55aa5588d5
Difference Hash:0000000808000001
Wavelet Hash:3e3e3e2e20300203
Color Hash:#862d67

Other Hashes

Crop Resistant:0000000808000001

Scan History

Scan history not available

Unable to load historical scan data