Security Scan Report: chroromee-google.com.cn

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is chroromee-google.com.cn and was registered 3 weeks ago.

Submitted URL: https://chroromee-google.com.cn/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Typosquatting domain impersonating Google Chrome and pushing a browser download through an unofficial third-party downloader. No forms or IoC hits, but brand impersonation on a 24-day-old unranked host makes it high risk.

Risk Factors (4)
Brand impersonation of Google Chrome on a non-Google domain
Deceptive/typosquatting hostname (chroromee-google.com.cn) mimicking a Google domain
Domain registered only 24 days ago and absent from Cisco Umbrella top 1M
Software download funneled through an unofficial third-party downloader, a common malware-distribution vector
Domain age information unavailable

Details

Page Title

谷歌浏览器—Google下载快速且安全的浏览器

Scan Type

public

Domain Name Analysis

The domain 'chroromee-google.com.cn' uses the Chinese country-code top-level domain (.com.cn) and has no subdomain. The second-level label 'chroromee-google' is 16 characters long split between 7 vowels and eight consonants; bonus characters include one hyphen. Word splitting yields 4 words: ch, roro, mee, google. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chroromee-google.com.cn/

Page Load Overview

1.67s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:959 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software94% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
94%
documentation technical
85%
blog personal website
80%
government public service
75%
download file sharing
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
223.248.224.188United States
AS138415Yancy Limited
21--

Detected Technologies2

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A582726B6AF3202A3807E0F17BA6170B6EA5D403C54BC9653ADC0A98CFC6ED458D375D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:TEvStci04T2Vcj9FlJxMkgr4XB/s2nkNQg9l6TXLw6a/Q7GyAL1eTKyJAXG69dFW:TEq8m2xwu269Qc9UwdHmq0b

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18665:5hiYkCQACBk0ICQkwpXgAlIRDsc8BQYI8uoWOiVAgeKRUBIUwiigiJAAStEiJCAk6BaDgCCMYcsRMSFBgBAwYEbIwAwrwRWk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2726e6e4fee7efbe
Perceptual Hash:f7239d88dca2568c
Difference Hash:e84c4c4c300c0e24
Wavelet Hash:260424e0fce7ff2a
Color Hash:#50931f

Other Hashes

Crop Resistant:e84c4c4c300c0e24

Scan History

Scan history not available

Unable to load historical scan data