ScanMalware.com

Security Scan Report: lindoibueno.com

Site favicon
Submitted: Oct 9, 2026, 5:59:45 AMCompleted: Oct 9, 2026, 6:00:23 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 82%

9
Risk Score

Jewelry-themed login page on lindoibueno.com is flagged by threat intel as a malware loader and loads a script from cosmical2049.com, a corroborated PowerShell-injector host — treat as compromised/malware-serving.

Risk Factors (5)
Content-malware Indicator of Compromise on the primary domain (malware loader)
Page loads JavaScript from a corroborated malware-flagged host (powershell injector, 3 feeds)
Unranked third-party script host contacted from the page
Injected/gibberish page text suggesting a compromised site
Login/password form on a page whose domain is flagged for malware
Domain age information unavailable

Details

Page Title

Citiber – Joyeria

Scan Type

public

Domain Name Analysis

The domain 'lindoibueno.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'lindoibueno' spans 11 characters holding six vowels versus 5 consonants. It segments into 3 words: lin, doi, bueno. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lindoibueno.com

Page Load Overview

4.86s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:207 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence
Type: spa
Method: structural

All Detected Categories

social_media
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23147.93.37.33São Paulo, São Paulo, Brazil
AS47583Hostinger International Limited
23142.251.127.95Google · CDNUnited States
AS15169Google LLC
23195.58.146.210Denmark
AS9009M247 Europe SRL
23142.251.14.94Google · CDNUnited States
AS15169Google LLC
924--

Detected Technologies13

WordPressv7.1.3
100%
PasswordField
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
reCAPTCHA
45%
LiteSpeed
40%
Hostinger
40%
HTTP/3
40%
WooCommerce
20%
Select2
20%
Font Awesome
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9931832785B042A32AF176FA057B31C647DC6A5DA12D7F5F4B5812947F0EE233A3A09

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:HS45ypT90AealADAg8JA+39gxCB3ojL+nSN1eOT38MF6Z4AjmPpw0GIXQ8ODVUSi:HEZ90AeqADAgqA+39gxxjL+nS3eOT38i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93906:IjmAFpEbESHFWFshAAkeGoGEyYAdJhA0VUQgkWdBnjEACMKgTRlTNVEhKIKQCCaNLiqSYAwAjsQyCC2iVgZCirHyAgAWPIAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffff0000
Perceptual Hash:c9b662b3984ca673
Difference Hash:10080cb2b20c5151
Wavelet Hash:ff81dbdbf9e10000
Color Hash:#6640bf

Other Hashes

Crop Resistant:10080808b2b24c30,88bab2b0a2d8d8da,0000000000000000,080808b2b20c5151

Scan History

Scan history not available

Unable to load historical scan data