Security Scan Report: www.theoryofliving.com

Redirected to:
https://theoryofliving.com/
Site favicon
Submitted: Jun 17, 2026, 4:40:40 PMCompleted: Jun 17, 2026, 4:42:41 PMpubliccompleted

This website contacted 6 IPs in 2 countries across 25 domains to perform 236 HTTP transactions. The main domain is theoryofliving.com and was registered 6 years ago.

Submitted URL: https://Www.theoryofliving.com

Effective URL:

https://theoryofliving.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Established furniture site is compromised: ClearFake Polygon contract loader YARA hit, DevTools blocking, external POST to algo2nest.info, and injected casino SEO spam. Confirmed malicious.

Risk Factors (5)
ClearFake malware loader using Polygon smart contract (EtherHiding) to fetch next-stage payload.
Large-scale casino/gambling SEO spam injected into legitimate site.
Anti-analysis JavaScript blocking DevTools and right-click.
Suspicious cross-origin POST to algo2nest.info.
Known malicious kit roster match.
Domain age information unavailable

Details

Page Title

Theory of Living Homepage - Theory of Living

Scan Type

public

Domain Name Analysis

You're looking at domain 'Www.theoryofliving.com' on the commercial generic top-level domain (.com), featuring subdomain 'www'. Its registrable label 'theoryofliving' stretches across 14 characters containing five vowels alongside nine consonants. It segments into 3 words: theory, of, living. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://Www.theoryofliving.com

Page Load Overview

26.22s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,553 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
e-commerce
40%
news/blog
40%

Detected Features

Login Form
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
41192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
39192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
39142.250.154.95United States
AS15169Google LLC
3923.53.40.192Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3974.208.236.13United States
AS8560IONOS SE
39213.165.45.132Charlotte, North Carolina, United States
AS203273NetCrafters OU
2366--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T172843BF7D82D21BA131BB5E06078770CB592911ADF838880F3FD599CB7D8E91A66324D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:VqcJO1hN8gqF8MSwwK/LOfpxBR/r3rii8wgHu0rFTK2Kq1mTW0U4tDeqJ:GwXLCZDriiWrUDPJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:376436:ggJBQUqRTfkNEGVEECwbRugEsArEMmuwUL1OAAIkZAHCgWQCpZKwcQMoUBTHFCAKgSQBgBcADhASsCqwIrqzWCDCiCAYMAyQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffe7e7ffffff
Perceptual Hash:f555dd7522aa882a
Difference Hash:0000000c0c000000
Wavelet Hash:32323e26263e3232
Color Hash:#6cc9e0

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data