kqhwsgierg.terltu.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of kqhwsgierg.terltu.com
The domain kqhwsgierg.terltu.com appears to be a very new subdomain that, based on the provided screenshot, is presenting a page styled to resemble a major online retail marketplace. The visible layout includes familiar e-commerce elements such as a search bar, product tiles, promotional banners, account links, and shopping-cart navigation, suggesting that the page may be attempting to function as an online shopping storefront or mimic one.
The hostname structure is unusual for a consumer-facing retail site: it uses a random-looking subdomain under terltu.com rather than an official brand domain. No clear operator identity is provided in the scan data, and the domain is not ranked in major traffic lists, which may indicate limited history or visibility. Based on the screenshot and domain pattern alone, this page appears more consistent with a look-alike retail page than with an established standalone business website.
Safety Assessment for kqhwsgierg.terltu.com
The scan results show mixed signals at the time of this scan. One security engine flagged the URL for phishing-related activity, while other available blacklist and malware-scan checks did not report confirmed threats. Even so, the combination of a very new domain, an unranked web presence, and a page that closely resembles a well-known retailer on a different domain may indicate elevated risk beyond what automated detections alone capture.
The strongest concern here is the apparent mismatch between the displayed branding in the screenshot and the actual domain name. A page that visually resembles a major shopping platform but is hosted on an unrelated, newly registered subdomain may be a look-alike intended to collect logins, payment details, or other personal information. Although no broader malware activity was detected in the available scan data, phishing pages often have limited external resources and can remain lightly detected early in their lifespan.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure and resolves to an IP address associated with that provider. It presents a valid Let's Encrypt SSL certificate, which indicates encrypted HTTPS connectivity, though a valid certificate by itself does not verify business legitimacy. The web server is identified as Cloudflare, and the nameservers also point to Cloudflare-managed DNS.
From a domain-security perspective, the domain is only 10 days old and DNSSEC appears to be unsigned. The use of a newly created subdomain with random-looking naming, combined with limited public footprint and a phishing-related detection from one security engine, may warrant caution at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?