Security Scan: Just a moment…

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b643cdb-53c8-4fb1-8174-33b5bce85192 Domain and IP registration (RDAP)/api/v1/rdap/4b643cdb-53c8-4fb1-8174-33b5bce85192 Certificate Transparency/api/v1/ct/butterflytampa.com How often this domain was scanned/api/v1/domain/stats/butterflytampa.com Scan history for this domain/api/v1/domain/history/butterflytampa.com?limit=15

This website contacted 22 IPs in 3 countries across 16 domains to perform 135 HTTP transactions. The main domain is butterflytampa.com and was registered 28 years ago.

Submitted URL: https://butterflytampa.com

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Appears to be a legitimate Tampa butterfly garden whose page now loads EtherHiding malware; the primary domain is flagged by two feeds and CRITICAL IDS alerts confirm malicious JavaScript exfiltration.

Risk Factors (6)

Primary domain carries a multi-source content-malware Indicator of Compromise (clearfake)

CRITICAL IDS alert: EtherHiding malware exfiltration

Scripts load from multiple third-party hosts with malware/RAT Indicators of Compromise (sentrydb.org, checkyoubrowse.codes)

Obfuscated JavaScript and injected gibberish strings suggest a compromised page

Blockchain RPC callbacks typical of EtherHiding loaders

Excessive redirect chain (6 redirects, 4 cross-domain)

Domain age information unavailable

Details

Page Title

Just a moment…from scan record

Scan Type

public

Domain Name Analysis

The domain 'butterflytampa.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'butterflytampa' stretches across 14 characters holding 4 vowels versus ten consonants. Splitting it apart reveals two words: butterfly, tampa. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.39s

Total Load Time

11.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,714 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning98% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

98%

adult content

75%

blog personal website

72%

government public service

56%

healthcare medical

55%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	160.153.0.29Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
6	104.18.23.7Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	150.171.109.98Azure · CLOUD	United States	AS8075Microsoft Corporation
6	2.16.110.99Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
6	162.159.138.60Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.13.95Google · CDN	United States	AS15169Google LLC
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.13.94Google · CDN	United States	AS15169Google LLC
135	22	-	-