Security Scan Report: lambayecano.com

Redirected to:
https://www.lambayecano.com/
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 5 domains to perform 63 HTTP transactions. The main domain is lambayecano.com and was registered 4 years 1 month ago.

Submitted URL: https://lambayecano.com

Effective URL:
https://www.lambayecano.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 4-year-old Peruvian candy site whose pages have been compromised and inject Macfinger ClickFix AMOS stealer / ClearFake malware loaders plus injected spam text. Do not visit; owners should clean the site.

Risk Factors (4)
Compromised site injecting ClickFix/AMOS stealer and ClearFake EtherHiding loaders into the HTML
Injected Russian-language SEO spam text unrelated to the business ('Чтобы избежать сквозняка...') indicating tampering
Unranked external script host indigo-flicker-zephyr-truior.pro contacted by page scripts
Single-source threat-intel malware classifications for the domain
Domain age information unavailable

Details

Page Title

Productos Lambayecano – Industria del dulce Lambayecano, lo auténtico aún existe

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'lambayecano.com' is registered and has no subdomain. The core label 'lambayecano' covers 11 characters with five vowels and six consonants. Splitting it apart reveals three words: lamb, aye, cano. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lambayecano.com

Page Load Overview

13.63s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-PE
Text Length:1,408 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1875.119.200.54Hillsboro, Oregon, United States
AS26347New Dream Network, LLC
1574.125.29.95Google · CDNUnited States
AS15169Google LLC
15171.22.131.23Cyprus
AS203273NetCrafters OU
15142.251.13.94Google · CDNUnited States
AS15169Google LLC
634--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E504D9A07F921439213F536FF4A7B60C116A5A63DA4F66E1F0BEC00995E5F9232B170E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:30NlAA9ek+Sc6ONyM2UmKqr8n1RDFP5jgZkvfJ4gv3JTrD:DA9n+Sc6ON72UmcnzDZ5jua

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:182108:KpygVmoR8QIglQiEXECgJtkxKhD1gEYJoAQSQvAABIBFNRIwIJzLKAWkYEmwQOKAUnRGQCVKKkQ4Q4HRIMIFQCIJCjmJAUii

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:e413ec9b12e5936c
Difference Hash:08100c4501080626
Wavelet Hash:1e00200111ffffff
Color Hash:#1f5393

Other Hashes

Crop Resistant:08100c4501080626

Scan History

Scan history not available

Unable to load historical scan data