Security Review

Is study-buddy-lens.lovable.app legit or a scam?

Our verdict:Suspicious· 55/100

A Croatian-language AI study tool prototype hosted on a platform known for hosting rapid-deployment phishing and data-harvesting scams.

study-buddy-lens.lovable.appScanned 1h ago
0
Trust score
SUSPICIOUS
Heuristics 87·MT 40
Category tags
educationtechnology#data harvester85% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
3 years old
Registered May 6, 2023
MT Intelligence
Suspicious
Moderate likelihood · 85% confidence
SUSPICIOUS

Warning signs detected

A Croatian-language AI study tool prototype hosted on a platform known for hosting rapid-deployment phishing and data-harvesting scams. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of study-buddy-lens.lovable.app
LIVE RENDER
study-buddy-lens.lovable.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspection
0%
Confidence
The site is a subdomain of a popular AI-powered web builder that has recently seen a surge in malicious use for creating phishing pages. Our analysis shows the page is essentially a shell with no functional contact details, legal disclosures, or developer identity. While the domain itself is over three years old, this specific subdomain appears to be a newly created prototype with zero established reputation. The lack of any independent reviews or business registration is a significant red flag for a service claiming to process user data. We have flagged it as suspicious due to the high correlation between this hosting pattern and automated scam deployments.
Full dossier
Analysis complete

Page Content

The page is titled 'Scribe AI' and is written in Croatian, offering a service that converts textbook photos into lessons. It is extremely minimal, containing only a headline and a link to the underlying development platform. There are no privacy policies, terms of service, or 'About Us' sections visible.

Infrastructure

The site is hosted on a subdomain of a major AI app-building platform. While the hosting IP has a clean reputation, the platform itself is currently being monitored for widespread abuse by cybercriminals who use it to bypass traditional security filters.

Domain History

The root domain is well-established, but this specific subdomain lacks any historical traffic or search engine indexing. This suggests it was recently generated and has not yet undergone any third-party verification or security vetting.

Web Reputation

Our research found no specific scam reports for this exact subdomain, but the parent platform is heavily associated with recent 'VibeScamming' and credential-harvesting campaigns. The absence of both positive and negative feedback is typical for short-lived scam prototypes.
Risk Factors
5
  • Hosted on a platform frequently used for rapid-deployment phishing and job scams.
  • Complete lack of contact information, including email, phone, or physical address.
  • No business registration or developer identity could be verified.
  • The page is a minimal prototype with no functional legal or privacy documentation.
  • Zero visibility in global traffic indexes or search engine results.
Positive Signals
3
  • Zero detections across 92 antivirus engines in our network.
  • The hosting IP has a clean reputation with no significant abuse history.
  • The site uses a valid SSL certificate issued by a reputable provider.
AI Recommendation
Do not upload personal documents or photos to this site. If you are looking for AI study tools, use established platforms with verifiable business details and clear privacy policies.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for study-buddy-lens.lovable.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
3.1 yrs
Registered May 2023
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain study-buddy-lens.lovable.app is a subdomain hosted on Lovable.dev, an AI-powered no-code/low-code web app builder that reached significant scale ($100M+ ARR reported in 2025-2026).
  • The page title is "Scribe AI — Tvoj udžbenik, ali pametniji" (translated: "Scribe AI — Your textbook, but smarter") and promotes an "AI asistent za učenje koji pretvara fotografije udžbenika u interaktivne lekcije" (AI learning assistant th
  • Page content is minimal, primarily the title and subtitle, with an "Edit with Lovable" link pointing to a project ID, indicating it is a prototype or demo built on the Lovable platform rather than a fully launched production app.
  • Lovable.dev has documented abuse: multiple reports (Proofpoint, Guardio) show cybercriminals using it to rapidly generate and host phishing sites, credential harvesters, malware distributors, and scam pages on *.lovable.app subdomains.
  • Specific prior scam example on the platform: flixreviewer.lovable.app was exposed as a fake "Netflix Movie Reviewer" job scam luring users into affiliate offers and trials.
  • No independent reviews, mentions, complaints, or search results specifically for study-buddy-lens.lovable.app or its exact "Scribe AI" Croatian-language variant were found.
  • Lovable itself has mixed user feedback on Trustpilot/Reddit regarding credit consumption and billing, but the platform provides an abuse@lovable.dev reporting channel.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • SecurityBriefopen

    "Cybercriminals exploit AI website builder Lovable to swiftly create phishing and scam sites"

  • The Hacker Newsopen

    "Lovable AI Found Most Vulnerable to VibeScamming... enabling full scam creation with minimal guardrails"

  • MalwareTipsopen

    "Flixreviewer.lovable.app Netflix Movie Reviewer Scam Exposed"

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research into the hosting platform revealed multiple reports from security outlets like The Hacker News and SecurityBrief regarding its exploitation by cybercriminals. These reports highlight how the platform's AI tools are used to create convincing phishing pages with minimal oversight. We found no independent reviews or business registration for this specific 'Scribe AI' variant, which is common for experimental or malicious subdomains.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age3 years old
RegistrarCloudFlare, Inc.
RegisteredMay 6, 2023
ExpiresMay 6, 2029
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 12, 2026 (81d)
Self-signedNo
Hosting & Technology
HostingLovable Application Traffic
Server locationSE
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://study-buddy-lens.lovable.app/
  • 2200https://study-buddy-lens.lovable.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file1
ISPLovable Application Traffic
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat study-buddy-lens.lovable.app as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked study-buddy-lens.lovable.app as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • study-buddy-lens.lovable.app currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. study-buddy-lens.lovable.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 81 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • study-buddy-lens.lovable.app is 3.1 years old, registered on 5/6/2023 through CloudFlare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report study-buddy-lens.lovable.app as clean.
  • No. study-buddy-lens.lovable.app is not currently listed on the major browser blocklist feeds that modern browsers use.
  • study-buddy-lens.lovable.app resolves to an IP operated by Lovable Application Traffic in SE (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 22, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around study-buddy-lens.lovable.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·study-buddy-lens.lovable.app
SUSPICIOUS

This is a prototype AI learning tool hosted on a platform frequently exploited by scammers. While it lacks direct malware detections, the absence of any contact information or business registration makes it a high-risk site for entering personal data.

Do not upload personal documents or photos to this site. If you are looking for AI study tools, use established platforms with verifiable business details and clear privacy policies.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.