Security Scan Report: livebyproject.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 13 domains to perform 129 HTTP transactions. The main domain is livebyproject.com and was registered 7 years ago.

Submitted URL: https://livebyproject.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking coaching site whose WordPress pages are compromised: injected ErrTraffic/Exvicy loader plus a ClickFix fake 'Human Verification' overlay pulling a second stage via blockchain EtherHiding. Do not visit or follow its prompts.

Risk Factors (6)
Compromised WordPress site serving an injected ErrTraffic/Exvicy loader and a ClickFix fake 'Human Verification' overlay
EtherHiding: loader pulls its next stage from a blockchain smart contract, evading takedowns
Nine critical IDS alerts for exploit-kit check-in and malware exfiltration
Google Safe Browsing Unwanted Software detection
Decoded scripts contact multiple threat-feed-listed blockchain RPC/hosting domains
Page instructs visitors to 'authorize your browser' and press key combinations — a ClickFix lure aimed at the visitor
Domain age information unavailable

Details

Page Title

Live By Project – Live By Project

Scan Type

public

Domain Name Analysis

Domain 'livebyproject.com' uses the commercial generic top-level domain (.com). Its registrable label 'livebyproject' stretches across 13 characters with 4 vowels and nine consonants. Word splitting yields 3 words: live, by, project. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://livebyproject.com

Page Load Overview

9.65s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,282 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning48% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
48%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19162.241.253.84Phoenix, Arizona, United States
AS46606Unified Layer
564.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
5172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
52.27.5.107United States
AS202226Great Flower
5142.251.152.119Google · CDNUnited States
AS15169Google LLC
5104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.20.192Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
5104.17.31.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12923--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2244B737294183F236B4ADBA029370D71BEC182DD0295D4B3EDC26BA7E5DD22193729

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ckyYRurh0DM4xY7hX+QX6xJqEOIriuG+NkSieP546y1ro3oMYWscK+5g7ZZ2RK6L:ckNuAKuQX6xJSZ76vvxJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:218610:AAijvwFqLAC7QiAQkkCsElkMjgEDsARQQTUbmAIgKqAgAIQsgAIWlKbggIgVyGHpZCgUQEJDoQAUTvdD1FgSNocAIDaRTCyS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3fffffff7
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:fcc4c0c00f0fff00
Color Hash:N/A

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data