Security Scan Report: teragu.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 1 country across 13 domains to perform 317 HTTP transactions. The main domain is teragu.com and was registered 17 years ago.

Submitted URL: https://teragu.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised Magento storefront serving a known malicious loader kit that displays a fake Chrome update prompt and downloads an UpdateChrome.cmd payload. Do not interact; avoid downloading anything.

Risk Factors (5)
Known malicious Magento CMS-block loader kit injected into the page (CRITICAL, analyst-vetted roster match)
Fake Chrome update / ClickFix-style payload that downloads UpdateChrome.cmd to the visitor's machine
LocalStorage-persisted loader re-executing via onclick attributes on subsequent page views
Unranked third-party script host deepveindrilling.com serving code to the page
Inline scripts use encoding/decoding functions with 21 eval() calls, consistent with obfuscated injected code
Domain age information unavailable

Details

Page Title

Teragu | Activewear with style

Scan Type

public

Domain Name Analysis

The domain 'teragu.com' uses the commercial generic top-level domain (.com). The core label 'teragu' covers 6 characters holding three vowels versus three consonants. Breaking it apart gives 2 words: tera, gu. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://teragu.com/

Page Load Overview

10.20s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,690 chars
Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping74% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
74%
entertainment media
73%
adult content
57%
documentation technical
49%
news media journalism
44%

Detected Features

Login Form
Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18146.190.43.22Santa Clara, California, United States
AS14061DigitalOcean, LLC
13142.250.154.95Google · CDNUnited States
AS15169Google LLC
13172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.208.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.250.154.94Google · CDNUnited States
AS15169Google LLC
13188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.207.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.20.97Google · CDNUnited States
AS15169Google LLC
13192.178.183.100Google · CDNUnited States
AS15169Google LLC
13192.178.183.139Google · CDNUnited States
AS15169Google LLC
31724--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B554F819B7F61A36565392D4A065733D1B37E21EEB804CF8F8DE01B963CCDE62613298

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:UqS8qOLoYzIIOrnMn1Nk3t7Rck9RD5JxoeoXxvo036ioPbAnwSKLMP0F16s5Qubl:oOE6ucWiwfF16seubjnhcFDcFF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:291683:DTViiWuADIjhEEjJRIAIBgglcMiRmIeIAGCQWAQsQEwAwBBjCSAIEBy4xC1QFa0J69wlgnIMU5hqxLP+QBsS0iERkKFgGQwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data