ScanMalware.com

Security Scan Report: dy.xznkjzx.cn

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a38bf969-5e9f-44bb-9d10-8645b87046b6Domain and IP registration (RDAP)/api/v1/rdap/a38bf969-5e9f-44bb-9d10-8645b87046b6How often this domain was scanned/api/v1/domain/stats/dy.xznkjzx.cnScan history for this domain/api/v1/domain/history/dy.xznkjzx.cn?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 59 HTTP transactions. The main domain is xznkjzx.cn and was registered 3 years 3 months ago.

Submitted URL: https://dy.xznkjzx.cn

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Google Chrome download page on xznkjzx.cn that lures users with copied Google marketing copy to a trojanized ZIP; the domain carries a multi-feed silverfox malware report. Do not download.

Risk Factors (5)
Brand impersonation of Google Chrome on a non-Google domain
Malware-family threat-intelligence hit (silverfox) on the primary domain, corroborated by two independent feeds
Downloads a ZIP archive from an unrelated r2.dev bucket instead of Google's official installer
Copied Google Chrome content used as a lure to drive installs
Hostname 'dy.xznkjzx.cn' is a subdomain of a small download-site domain, not a Google property
Domain age information unavailable

Details

Page Title

Google Chrome 网络浏览器

Scan Type

public

Domain Name Analysis

Domain 'dy.xznkjzx.cn' uses the Chinese country-code top-level domain (.cn); it also runs on subdomain 'dy'. Count 7 characters in 'xznkjzx' with 0 vowels and seven consonants. Splitting it apart reveals four words: x, z, nkj, zx. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

© chrome 安全 ”由Google打造 扩展程序 7 中 暂停动画 Chrome 浏览器， @ 快捷 随行 & 下载Chrome Y © HEH x + < > C G Google 中搜索,或输入网址 四 人女 全 Q 在 Google 中搜索，或输入网址

Page Load Overview

13.70s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh
Text Length:4,452 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
57%
healthcare medical
49%
adult content
45%
education learning
44%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21202.162.99.175Singapore
AS152194CTG Server Limited
19142.251.152.4Google · CDNUnited States
AS15169Google LLC
19142.251.153.4Google · CDNUnited States
AS15169Google LLC
593--

Detected Technologies7

X-UA-Compatible
100%
Open-Graph-Protocolvwebsite
100%
Nginx
40%
HTTP/3
40%
HSTS
40%
Google Tag Manager
30%
YouTube
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC156CDA676415B4E50B87EAD3992179323970FF4C8286A9F39D0C48F7815ED8B07C8B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:GHTIv9t9mKywuHqIgj71tAvUhVw8+Zn555+28bFfDHC2X5P2b9DJ5q9f54F+O/Fn:1FjyD/h/hm2DFD0BCRTA/a9yWk6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:918832:ALogERgm3MAIAWEkBAIbg2BEIYaHEiUIwCC1wYOYjgSJAUcBqWAAFPVDGKCo0CIALYFyQnYGjFhsiYIwQErDGQRDyBhE5gbB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffcbc1c383
Perceptual Hash:b8c72c1997c77894
Difference Hash:e28d0d4817133637
Wavelet Hash:7ec7e7e7c1818181
Color Hash:06000008480

Other Hashes

Crop Resistant:e28d0d4817133637,594b4b5b486c3b1d

Scan History

Scan history not available

Unable to load historical scan data