Security Report: www.opuslabsrl.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/68125c02-e965-4c32-ad89-fb5c8fbb0d8a Domain and IP registration (RDAP)/api/v1/rdap/68125c02-e965-4c32-ad89-fb5c8fbb0d8aHow often this domain was scanned/api/v1/domain/stats/opuslabsrl.it Scan history for this domain/api/v1/domain/history/opuslabsrl.it?limit=15

This website contacted 9 IPs in 4 countries across 8 domains to perform 75 HTTP transactions. The main domain is opuslabsrl.it and was registered 8 years ago.

Submitted URL: https://www.opuslabsrl.it

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate 9-year-old Italian medical-lab site that has been compromised: an injected ClickFix overlay fakes a Cloudflare 'Human Verification' check and tricks Windows users into pasting a PowerShell payload, with an EtherHiding blockchain loader and CRITICAL IDS malware alerts.

Risk Factors (5)

Injected ClickFix social-engineering overlay impersonating a Cloudflare 'Human Verification' challenge on a non-Cloudflare page

Overlay instructs Windows visitors to open Terminal via Win+X and paste clipboard content, which delivers a PowerShell payload

EtherHiding blockchain-based loader (Polygon smart contract resolving the overlay host) — active malware infrastructure

Obfuscated script hiding threat-feed hosts (1rpc.io, ncheck-brows.beer, polygon.drpc.org, polygon.gateway.tenderly.co) from casual inspection

Multiple CRITICAL network IDS alerts for exploit-kit check-in and EtherHiding exfiltration tied to the page load

Domain age information unavailable

Details

Page Title

Opuslabsrl | La Vostra salute, il nostro controllo

Scan Type

public

Favicon Hash

MMH3: 912905927

MD5: a69da95687427f58c1606d381219db3d

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'www.opuslabsrl.it' is registered with subdomain 'www'. Count 10 characters in 'opuslabsrl' containing three vowels alongside seven consonants. It segments into three words: opus, labs, rl. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.74s

Total Load Time

4.5 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:2,433 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical98% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

98%

documentation technical

69%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	89.46.106.51	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
8	142.251.110.95Google · CDN	United States	AS15169Google LLC
8	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
8	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	31.77.16.64	Amsterdam, North Holland, Netherlands	AS219337Fzco
8	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
75	9	-	-