ScanMalware.com

Security Scan Report: moneywithtony.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d2051aad-d1f0-4b1e-a35f-7ff95d780582Domain and IP registration (RDAP)/api/v1/rdap/d2051aad-d1f0-4b1e-a35f-7ff95d780582How often this domain was scanned/api/v1/domain/stats/moneywithtony.comScan history for this domain/api/v1/domain/history/moneywithtony.com?limit=15
This website contacted 6 IPs in 1 country across 6 domains to perform 25 HTTP transactions. The main domain is moneywithtony.com and was registered 5 months ago.

Submitted URL: https://moneywithtony.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking marketing page that is compromised and serves an EtherHiding/ClickFix malware loader with live C2 traffic to a flagged ClickFix domain. Avoid.

Risk Factors (5)
Page serves an obfuscated EtherHiding/ClickFix loader that pulls a second-stage payload from an Ethereum contract
Critical IDS detections for malware C2/exfiltration and ClickFix domain in TLS SNI
Primary domain flagged as malware-related (iclickfix) in multi-feed threat intelligence
Obfuscated inline script concealing known-attacker RPC/relay hosts from casual inspection
Site appears compromised: legitimate-looking digital-marketing opt-in page carrying injected malicious script
Domain age information unavailable

Details

Page Title

moneywithtony.com

Scan Type

public

Domain Name Analysis

The domain 'moneywithtony.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'moneywithtony' covers 13 characters containing 4 vowels alongside 9 consonants. Tokenizing the label suggests 3 words: money, with, tony. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://moneywithtony.com

Page Load Overview

90.16s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,586 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.116.250.30United States
AS46549Global Virtual Opportunities
471.40.109.121San Antonio, Texas, United States
AS46549Global Virtual Opportunities
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
4142.251.150.120Google · CDNUnited States
AS15169Google LLC
4104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
256--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12FB3C721836448F93D5F8B29D185F318F644AA52CE4A66D7F0ADD1509BCC9BB24B3B0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7iCu/F3yp4xRcn88EcrFN5m6EK0j4wG7R3RKymYtbkNTxDFMshID1Lo3TIYYzE1W:DsokO18N52/H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:108155:QJIQlISZMABEqEoLCRWAJCyBAAUofRwhx0hQyoMANHFkAEo6ANYEwUTCMMAgmoAAgxhjBZYrYIAigyKJISmAgHCRvkIKhEkK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff81d1f381f3ffff
Perceptual Hash:ed6c9b929392d238
Difference Hash:2333276737270677
Wavelet Hash:ff8080f081c3ff93
Color Hash:N/A

Other Hashes

Crop Resistant:2333276737270677,48145c4c4e494ccc

Scan History

Scan history not available

Unable to load historical scan data