Security Report: irvincap.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/909ce65b-163e-42e6-b125-4652fbe1b7e9 Domain and IP registration (RDAP)/api/v1/rdap/909ce65b-163e-42e6-b125-4652fbe1b7e9 Certificate Transparency/api/v1/ct/irvincap.com How often this domain was scanned/api/v1/domain/stats/irvincap.com Scan history for this domain/api/v1/domain/history/irvincap.com?limit=15

This website contacted 15 IPs in 3 countries across 13 domains to perform 28 HTTP transactions. The main domain is irvincap.com and was registered 18 years ago.

Submitted URL: https://irvincap.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site serving ErrTraffic/Exvicy loader and a fake Cloudflare ClickFix 'Human Verification' overlay that pushes Windows+Terminal paste-to-run malware, with EtherHiding exfiltration and injected casino SEO spam.

Risk Factors (6)

Analyst-vetted malicious kit roster match (phishing category) — ErrTraffic/Exvicy loader and ClickFix Win+X overlay

Fake Cloudflare 'Human Verification' page instructing users to open Terminal, paste with Ctrl+V and press Enter (ClickFix malware delivery)

Injected Russian-language Kraken marketplace text and casino/steroid/tv-guide SEO spam injected into a legitimate-looking template

8 CRITICAL network IDS alerts for ET MALWARE EtherHiding Exfil M2 with blockchain RPC beaconing

Primary domain irvincap.com and third-party resource domains reported as malicious host / 'ek clearfake' by 2-3 independent threat feeds

Content classifier flags gambling/betting category (76%) on a site that claims to be a business-financing company

Domain age information unavailable

Details

Page Title

Irvin Capital – Provide financing options to small businesses

Scan Type

public

Favicon Hash

MMH3: 403204237

MD5: fbaed86bb7a79fe8d3663a7cd864cf18

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'irvincap.com' is registered with no subdomain. The registrable portion 'irvincap' spans 8 characters with 3 vowels and 5 consonants. Splitting it apart reveals two words: irvin, cap. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.10s

Total Load Time

225 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,969 chars

Detector Agreement:75%

Website Classification

Primary Category

gambling betting76% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

76%

government public service

62%

blog personal website

60%

finance banking

60%

technology software

60%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	160.153.0.233Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	213.108.23.160	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
1	23.207.210.143Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
1	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
28	15	-	-