ScanMalware.com

Security Scan Report: chinawsl.com

Redirected to:
https://chinawsl.com/TG_ZH/index.html?20250902
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1fbeab86-723d-4305-b643-9457387efa9eDomain and IP registration (RDAP)/api/v1/rdap/1fbeab86-723d-4305-b643-9457387efa9eHow often this domain was scanned/api/v1/domain/stats/chinawsl.comScan history for this domain/api/v1/domain/history/chinawsl.com?limit=15
This website contacted 5 IPs in 3 countries across 4 domains to perform 44 HTTP transactions. The main domain is chinawsl.com and was registered 16 years ago.

Submitted URL: https://chinawsl.com/

Effective URL:
https://chinawsl.com/TG_ZH/index.html?20250902
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Unofficial site posing as Telegram's Chinese official download hub, flagged by Google Safe Browsing for social engineering. Avoid downloading anything here.

Risk Factors (5)
Google Safe Browsing social engineering detection (4 instances)
Impersonation of the Telegram brand on an unrelated domain
Misspelled brand name ('telegeram') used as download-bait keyword
Unofficial software download distribution for a third-party brand
No verifiable reputation for this domain hosting brand content
Domain age information unavailable

Details

Page Title

telegeram免费下载-telegeram官方版下载-telegeram中文版官网

Scan Type

public

Domain Name Analysis

The domain 'chinawsl.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'chinawsl' stretches across 8 characters with 2 vowels and 6 consonants. Word splitting yields 3 words: china, w, sl. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chinawsl.com/

Page Load Overview

24.41s
Total Load Time
24.2 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,161 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software55% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
55%
social media network
52%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12154.205.35.31Seychelles
AS9294GNET INC.
8142.251.14.97Google · CDNUnited States
AS15169Google LLC
8216.239.34.36Google · CDNUnited States
AS15169Google LLC
8216.239.32.36Google · CDNUnited States
AS15169Google LLC
843.169.32.101Singapore
AS139341ACE
445--

Detected Technologies6

Google Analyticsvga4
50%
Nginx
40%
HTTP/3
40%
HSTS
40%
Bootstrap
30%
Google Tag Manager
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158A242A655F4946341D38BCA3B65A71A3EE3D10BE50A6A0176BC4B9B6FD3D83CD4310C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:FXle3p7765FetFbYxtlpWHqEz2lcrkAuNKOwSKAjixy:hleNEFetlYxtlpWKhWkAuNaSdjixy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21443:GkLFQFjQz5AEN4QlAIKDDFDAUgiIglAEhKAAAPdwoPFBIAAUYCmpUwhDYMA0EKwnSQQqGBYQODEIyAWQ4LIhAUSIQwQAARGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ffc3c3ffe7c7
Perceptual Hash:e6d9669964999964
Difference Hash:2a0e0e1496100d0d
Wavelet Hash:80e2e2c3c3e7c7c3
Color Hash:#2dd24e

Other Hashes

Crop Resistant:2a0e0e1496100d0d,cca4a4a5a4a2c04c

Scan History

Scan history not available

Unable to load historical scan data