Security Scan Report: livonstay.com

Redirected to:
https://livonstay.com/wp-login.php?redirect_to=https%3A%2F%2Flivonstay...
Submitted: Oct 18, 2025, 1:28:45 AMCompleted: Oct 18, 2025, 1:30:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 3 countries across 4 domains to perform 14 HTTP transactions. The main domain is livonstay.com and was registered NaN years ago.

Submitted URL: https://livonstay.com/wp-admin/

Effective URL: https://livonstay.com/wp-login.php?redirect_to=https%3A%2F%2Flivonstay.com%2Fwp-admin%2F&reauth=1Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New, unranked WordPress login page – high‑risk phishing site; do not trust.

Risk Factors
Newly registered domain (<7 days) – high likelihood of phishing
Compromised WordPress URLs (wp-admin, wp-login) – strong indicator of a hacked site used for credential harvesting
Login/verification page on an unranked, brand‑new domain
Potential collection of reCAPTCHA tokens for automated abuse
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Bot Verification

Scan Type

public

Language

🇺🇸

English

(64% confidence)

Category

unknown

(0%)

Domain Information

The domain 'livonstay.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'livonstay' spans 9 characters split between 3 vowels and 6 consonants. Segmentation suggests three words: liv, on, stay. Median word length comes out to three characters. 'liv' most strongly signals Estonian. Secondary signals appear in Finnish and Chinese (Pinyin). Net impression: Estonian phrase.

Screenshot

Security scan screenshot of https://livonstay.com/wp-admin/

Page Load Overview

10.19s
Total Load Time
14
HTTP Requests
4
Domains
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:64%
Script Type:Latin
Text Length:54 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.250.185.227United States
AS15169GOOGLE
1177.73.233.52Brazil
AS53038WDI SOLUCOES EM TEC INFORMACAO LTDA
1142.250.185.195United States
AS15169GOOGLE
1142.250.185.163United States
AS15169GOOGLE
1142.250.186.67United States
AS15169GOOGLE
12a00:1450:4001:828::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
1142.250.185.67United States
AS15169GOOGLE
1142.250.186.99United States
AS15169GOOGLE
12a00:1450:4001:81d::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:810::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
1410--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T162A1A57109B20424DC1383A0A2F1B74A69637347F9C6C9A478EDA650EFCDDF6C4937A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:vrlklWJQe6UmpK7AxGJIi+KguEPOynZT6SnE+:OlWJf6UmpK7kGJIKCI+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4976:wBkJIBQVBDiFiANhYgBAAGhgAAoBFAQxAICAQGKQAQEAgKAIbAIAChIBjRbBEiGhEbACYogABIAwCkggDghgKBFCAkAEgAjA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7ffffffff
Perceptual Hash:b333cccccc993323
Difference Hash:000c0c0c00000000
Wavelet Hash:3f0303030f0f0f0f
Color Hash:#83e06c

Other Hashes

Crop Resistant:000c0c0c00000000

Scan History

Scan history not available

Unable to load historical scan data