Security Scan Report: tabbytownusa.org

Site favicon
Submitted: Sep 17, 2026, 11:47:33 AMCompleted: Sep 17, 2026, 11:48:26 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Legitimate 21-year-old cat-rescue nonprofit whose site appears compromised: critical IDS EtherHiding exfiltration alert, blockchain RPC connection, and malware Indicators of Compromise on the primary domain and a loaded third-party resource.

Risk Factors (4)
Critical IDS malware/EtherHiding exfiltration alert
Blockchain RPC connection consistent with EtherHiding C2/payload hosting
Malware Indicators of Compromise on the primary domain
Malicious third-party resource (xaz2.com) loaded by the page
Domain age information unavailable

Details

Page Title

Nonprofit, No-Kill Cat Rescue | Tabby Town USA | Westby, WI

Scan Type

public

Domain Name Analysis

The domain name 'tabbytownusa.org' uses the non-profit oriented generic top-level domain (.org). The registrable portion 'tabbytownusa' spans 12 characters with 4 vowels and eight consonants. Segmentation suggests three words: tabby, town, usa. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tabbytownusa.org

Page Load Overview

12.29s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,594 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning55% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
55%
corporate
35%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7207.246.255.40United States
AS32244Liquid Web, L.L.C
6142.251.13.97Google 路 CDNUnited States
AS15169Google LLC
6142.251.13.95Google 路 CDNUnited States
AS15169Google LLC
6142.251.151.119Google 路 CDNUnited States
AS15169Google LLC
6104.21.27.152Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
6142.251.156.119Google 路 CDNUnited States
AS15169Google LLC
6104.26.12.152Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
6172.67.142.245Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
6142.251.13.94Google 路 CDNUnited States
AS15169Google LLC
6711--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5C3D79F9BB232B471178B25BBDE5734436CC22358110CEA3975A519CF827A702FA25F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:MlhC9i5Q62I/xE6x4g5bn/+vI48qZdypaTWr0GlUImIBbsEO1wAQub4kBkkWP:M/4iC7vIoyp9rpPow/ub4kBkTP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:126502:FhEoTQkCgLCAElDIliQxIQ2GoARUhLCAnyEHkBAKFA7SHQ4LDB7KPDGJBIg0UBDWGQLFMTCEFCwAURoDAADhRSagnC1R4sIY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00103cb09e1effff
Perceptual Hash:dc4fa1306c6f1791
Difference Hash:122060653430030e
Wavelet Hash:00101cb09e1effff
Color Hash:#879ec5

Other Hashes

Crop Resistant:122060653430030e

Scan History

Scan history not available

Unable to load historical scan data