Security Report: teragu.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5bd2211f-e5d9-4778-b640-aae27d07b989 Domain and IP registration (RDAP)/api/v1/rdap/5bd2211f-e5d9-4778-b640-aae27d07b989How often this domain was scanned/api/v1/domain/stats/teragu.com Scan history for this domain/api/v1/domain/history/teragu.com?limit=15

This website contacted 20 IPs in 1 country across 13 domains to perform 310 HTTP transactions. The main domain is teragu.com and was registered 17 years ago.

Submitted URL: https://teragu.com/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Legitimate-looking 17-year-old Magento activewear store whose content blocks have been compromised with the DeepVein CMS-block loader, showing visitors a fake Chrome-update/Cloudflare check to deliver malware. Avoid.

Risk Factors (5)

Known malicious Magento CMS-block loader (DeepVein family) deployed in the site's content, rated CRITICAL by analyst-vetted kit roster

Hidden script persists in browser storage and executes on later page views, fetching further payload instructions from an operator server (ClickFix / fake Chrome-update lure)

Browser-automation fingerprinting beacon used to filter out sandboxes and researchers before serving the payload

Unranked external script host deepveindrilling.com actively delivering JavaScript to visitors

Heavy eval()/Function() usage combined with inline encoding/decoding routines (consistent with the loader's obfuscation)

Domain age information unavailable

Details

Page Title

Teragu | Activewear with style

Scan Type

public

Favicon Hash

MMH3: 886896379

MD5: 05369f88c02eeb82aa7a205110673740

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'teragu.com' is registered without a subdomain. Its registrable label 'teragu' stretches across 6 characters split between three vowels and three consonants. Tokenizing the label suggests two words: tera, gu. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

27.34s

Total Load Time

4.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,694 chars

Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping74% confidence

Type: spa

Method: ml+structural

All Detected Categories

e-commerce shopping

74%

entertainment media

73%

adult content

57%

documentation technical

49%

news media journalism

44%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
25	146.190.43.22	Santa Clara, California, United States	AS14061DigitalOcean, LLC
15	142.251.13.95Google · CDN	United States	AS15169Google LLC
15	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	104.18.208.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	142.251.110.94Google · CDN	United States	AS15169Google LLC
15	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	104.18.207.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	142.251.110.97Google · CDN	United States	AS15169Google LLC
310	20	-	-