Security Scan Report: stylive.net

Redirected to:
https://www.stylive.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 3 countries across 14 domains to perform 88 HTTP transactions. The main domain is stylive.net and was registered 4 years 3 months ago.

Submitted URL: https://stylive.net

Effective URL:
https://www.stylive.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised Chinese business site now serving a fake Cloudflare verification overlay that copies a PowerShell command to the clipboard for the visitor to paste and run — ClickFix malware delivery with blockchain-based C2.

Risk Factors (6)
Fake Cloudflare 'human verification' overlay used to deliver a clipboard-paste PowerShell command
Clipboard shell injection — command executed via Win+R/Win+X for arbitrary code execution
EtherHiding: blockchain-contract-based command-and-control, next stage fetched via BSC testnet RPC nodes hidden in obfuscated script
Known malicious kit family clickfix-winx-overlay-2026-10 with matching YARA rule
Compromised legitimate domain repurposed as malware delivery infrastructure
Threat-intel malware classifications on the primary domain (clearfake, unknown loader)
Domain age information unavailable

Details

Page Title

虚拟演播室设备声学装修-赛天鹰

Scan Type

public

Domain Name Analysis

You're looking at domain 'stylive.net' on the network infrastructure generic top-level domain (.net). The registrable portion 'stylive' spans 7 characters split between two vowels and five consonants. Splitting it apart reveals 2 words: sty, live. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stylive.net

Page Load Overview

6.49s
Total Load Time
752 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:1,221 chars
Detector Agreement:67%
Language mismatch: Declared as zh-Hans but detected as en

Website Classification

Primary Category

technology software82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
82%
documentation technical
72%
corporate business
62%
phishing scam
55%
government public service
54%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1843.143.113.91Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
535.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
534.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
8815--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T199E37D33A5D90022765783EE3615332439BD8127DB06E9E8B9FC6150EFC5AEB14B635C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3c5T6+1HlApOuonC3tF9V0S3yeyKd9+ASU7sxND0:zKFAMvA9V0Sd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:144305:IcQSFEAAECgNaIQAxxJ1UFsAJkiGLAREQCVAkgQIzgjAC+DcIEhRMxdgU6yquTGQACi4xGQEFGKILSsAZDLAmNwMEM4BIjKW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b03830cfc6cec6ce
Difference Hash:189a16100000100c
Wavelet Hash:27030f0ff0f0f8c0
Color Hash:#4082bf

Other Hashes

Crop Resistant:189a16100000100c

Scan History

Scan history not available

Unable to load historical scan data