Security Scan: Intranet Turia Capital

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/afb18b13-92cd-47d5-b496-a40314c225cb Domain and IP registration (RDAP)/api/v1/rdap/afb18b13-92cd-47d5-b496-a40314c225cbHow often this domain was scanned/api/v1/domain/stats/intranet.turiacapital.com Scan history for this domain/api/v1/domain/history/intranet.turiacapital.com?limit=15

This website contacted 13 IPs in 2 countries across 12 domains to perform 54 HTTP transactions. The main domain is turiacapital.com and was registered 2 years 9 months ago.

Submitted URL: https://intranet.turiacapital.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress intranet hosting ClearFake/EtherHiding and ClickFix injection kits, with a fake 'Human Verification' overlay, CRITICAL IDS EtherHiding alerts, and injected gambling SEO spam. Avoid; do not follow its instructions.

Risk Factors (5)

Content-malware indicator of compromise on the primary domain (multi-source corroborated)

ClearFake/EtherHiding blockchain contract loader injected into the page

ClickFix fake 'Human Verification' overlay instructing Windows users to run a pasted Terminal command

ErrTraffic/Exvicy XOR+Base64 obfuscated injection loader in a compromised WordPress page

CRITICAL IDS alerts for EtherHiding exfiltration and third-party loader domains (lskannsserv.beer, checkyoubrowse.codes) flagged as malicious

Domain age information unavailable

Details

Page Title

Intranet Turia Capital

Scan Type

public

Favicon Hash

MMH3: 179540103

MD5: bf1addd570102514adc260ee24d5bffa

Domain Name Analysis

Domain 'intranet.turiacapital.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'intranet'. The second-level label 'turiacapital' is 12 characters long with 6 vowels and 6 consonants. It segments into four words: tur, i, a, capital. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.15s

Total Load Time

800 KB

Total Size

Language Analysis

Primary Language

🇵🇱Polish

Code: pl

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:12,832 chars

Detector Agreement:50%

Language mismatch: Declared as es but detected as pl

Website Classification

Primary Category

healthcare medical84% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

healthcare medical

84%

government public service

41%

adult content

38%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	160.153.0.76Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	23.207.210.143Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	104.26.3.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	23.67.142.207Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
54	13	-	-