Security Scan: The Guru Barber

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d87e7d70-6ab9-4cf6-a1ce-e6e22f338722 Domain and IP registration (RDAP)/api/v1/rdap/d87e7d70-6ab9-4cf6-a1ce-e6e22f338722How often this domain was scanned/api/v1/domain/stats/thegurubarber.com.au Scan history for this domain/api/v1/domain/history/thegurubarber.com.au?limit=15

This website contacted 7 IPs in 2 countries across 5 domains to perform 66 HTTP transactions. The main domain is thegurubarber.com.au.

Submitted URL: https://thegurubarber.com.au

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Legitimate Perth barber site that appears compromised: injected obfuscated script implements a ClickFix/EtherHiding blockchain loader with a fake 'Human Verification' overlay. Do not follow any overlay instructions or run pasted terminal commands.

Risk Factors (4)

Compromised WordPress site serving an injected ClickFix/EtherHiding blockchain loader

Critical malware IDS alerts (EtherHiding exfiltration) tied to the page's scripts

Heavily obfuscated injected script hiding threat-feed hosts and a blockchain-based payload delivery mechanism

Known active phishing kit (fake 'Human Verification' overlay instructing Windows users to run Terminal commands)

Domain age information unavailable

Details

Page Title

The Guru Barber

Scan Type

public

Favicon Hash

MMH3: -168268833

MD5: dd3b651f8c28b92f769e3134ad8fb48c

Domain Name Analysis

You're looking at domain 'thegurubarber.com.au' on the Australian country-code top-level domain (.com.au). The core label 'thegurubarber' covers 13 characters split between 5 vowels and eight consonants. Breaking it apart gives 3 words: the, guru, barber. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.32s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,375 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content32% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	151.101.130.159Fastly · CDN	United States	AS54113Fastly, Inc.
9	74.125.29.95Google · CDN	United States	AS15169Google LLC
9	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	142.251.20.95Google · CDN	United States	AS15169Google LLC
9	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
66	7	-	-