ScanMalware.com

Security Scan Report: planetoptical.it

Redirected to:
https://www.planetoptical.it/
Site favicon
Submitted: Sep 13, 2026, 4:47:31 AMCompleted: Sep 13, 2026, 4:48:02 AMpubliccompleted

Summary

This website contacted 20 IPs in 2 countries across 14 domains to perform 2 HTTP transactions. The main domain is planetoptical.it and was registered 21 years ago.

Submitted URL: https://planetoptical.it

Effective URL:

https://www.planetoptical.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate optical shop likely compromised: page serves an EtherHiding blockchain malware loader and a fake CAPTCHA that tells visitors to paste commands into PowerShell. Do not interact.

Risk Factors
CRITICAL IDS malware alerts (EtherHiding exfiltration) detected in page traffic
EtherHiding loader: blockchain RPC endpoints used as malware C2 channel
ClickFix-style fake CAPTCHA pushing users to execute PowerShell commands
Obfuscated/injected JavaScript with dynamic code execution and heavy crypto API usage
Threat-intelligence hits naming the domain and its BNB Chain resource as malware
Domain age information unavailable

Details

Page Title

Planet Optical | Centro ottico a Fiumicino

Scan Type

public

Language

🇮🇹

Italian

(80% confidence)

Category

documentation technical

(100%)

Domain Information

The domain 'planetoptical.it' uses the Italian country-code top-level domain (.it) and has no subdomain. Count 13 characters in 'planetoptical' holding five vowels versus eight consonants. Breaking it apart gives 2 words: planet, optical. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://planetoptical.it

Page Load Overview

9.40s
Total Load Time
78
HTTP Requests
14
Domains
1.9 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:it-IT
Text Length:6,125 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical100% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
100%
education learning
100%
government public service
100%
healthcare medical
100%
blog personal website
100%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21172.217.115.4Google · CDNUnited States
AS15169Google LLC
389.46.106.57Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.217.112.4Google · CDNUnited States
AS15169Google LLC
335.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.217.117.4Google · CDNUnited States
AS15169Google LLC
7820--

Page Statistics

78
Requests
14
Unique Domains
2.7 MB
Total Size

Detected Technologies6

WordPressv7.1
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
HTTP/3
40%
Aruba.it
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18004728F4B7632F0B5034F8ABACA67349A5D8133551105EAF875D888CED362B03B675E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4u+eBwudB/HCKcKoz8yBoc29B2XN2xXQ+2QzDt9ZdypaT/rdD6IHH4cHImIuRNjS:DVypsr924kowIc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:175407:DwCmwiRyhpCRAG1CECsQQYo0exASAlrIJUQCAiUUEWoCT4W0QwIUBE6IpgFSRxADKUgLyy2CUwII7QVJ5AgBI8EcgAHWIIAc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fb01010101f9ffff
Perceptual Hash:a90ad4c9b3d2e996
Difference Hash:3335311173d3034c
Wavelet Hash:f901010101f9ffff
Color Hash:#ac6e53

Other Hashes

Crop Resistant:3335311173d3034c,37cad9e2e682c0e1,3171585065692307,cace52b332357496

Scan History

Scan history not available

Unable to load historical scan data