Security Scan Report: file.guru-whatsapp.com

Redirected to:
https://tw.yahoo.com/?guccounter=1
Site favicon
Submitted: Completed: publiccompleted
This website contacted 143 IPs in 11 countries across 127 domains to perform 998 HTTP transactions. The main domain is guru-whatsapp.com and was registered 1 month ago.

Submitted URL: https://file.guru-whatsapp.com/

Effective URL:
https://tw.yahoo.com/?guccounter=1
Redirected

AI Security Verdict

Moderate Risk

Confidence: 82%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Risk Factors (1)
Unusual 51-redirect chain (35 cross-domain) through the unrelated entry host file.guru-whatsapp.com and multiple ad exchanges (admanmedia, pubmatic, doubleclick, taboola) before reaching Yahoo — consistent with redirect/traffic monetization rather than deliberate navigation
Safety Factors (1)
Capture ends on tw.yahoo.com, the brand owner's own established domain (#219633 in Cisco Umbrella), so the Yahoo branding is not impersonation
Domain age information unavailable

Details

Page Title

Yahoo

Scan Type

public

Domain Name Analysis

The domain name 'file.guru-whatsapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'file'. The second-level label 'guru-whatsapp' is 13 characters long holding 4 vowels versus eight consonants, notching 1 hyphen. Tokenizing the label suggests 4 words: guru, what, s, app. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://file.guru-whatsapp.com/

Page Load Overview

2.99s
Total Load Time
14.6 MB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:69%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hant-TW
Text Length:17,805 chars
Detector Agreement:75%
Language mismatch: Declared as zh-Hant-TW but detected as ko

Website Classification

Primary Category

healthcare medical60% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
60%
adult content
59%
documentation technical
29%
government public service
27%
forum
20%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
146108.132.98.138Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
6101.47.41.232Singapore, Singapore
AS150436Byteplus Pte. Ltd.
687.248.119.251United Kingdom
AS203220Yahoo-UK Limited
6188.125.72.139Dublin, Leinster, Ireland
AS34010Yahoo-UK Limited
654.220.29.121Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
687.248.119.252United Kingdom
AS203220Yahoo-UK Limited
654.246.15.254Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
63.161.82.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6142.251.110.154Google · CDNUnited States
AS15169Google LLC
6146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
998143--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15A352CB6D232C52B945FACE8A5713F2950C7932BCE8686ECF6DCC20057C68B15BD7258

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:wsgcbugS4nfNAo7ArsuFwejoqQRS1FQ4smofMft+yo3o/1gey89Iu:evjjQmsmYeR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1065601:AArBHzJMwqDgDhiDQDRrFIQyQAoqECdJKCgRIiEgzUCqZkBWyIGIoBjkIiAQCwlcVAIkDESoAQAQgpt2kI7B4BxghtFoxihI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f7c3c3cfddffc9c9
Perceptual Hash:b934c7c69633944b
Difference Hash:0d969e9db199db1b
Wavelet Hash:c3c3c3c5c5fdc181
Color Hash:#d279a0

Scan History

Scan history not available

Unable to load historical scan data