Security Scan Report: zh.chroromee-google.com.cn

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is chroromee-google.com.cn and was registered 3 weeks ago.

Submitted URL: https://zh.chroromee-google.com.cn/

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Typosquatted domain falsely presenting itself as Google's official Chrome download page and routing users to a third-party software-manager installer; brand impersonation on a 24-day-old unranked host. No forms or IoC hits, but do not download anything here.

Risk Factors (5)
Typosquatted domain impersonating Google/Google Chrome
Unauthorized third-party browser download channel (bundled software manager)
Brand impersonation of a different entity on a mismatched, 24-day-old domain
Unranked domain claiming to be a major global brand
Potential bundled adware/PUP risk from the unofficial downloader
Domain age information unavailable

Details

Page Title

谷歌浏览器—Google下载快速且安全的浏览器

Scan Type

public

Domain Name Analysis

The domain name 'zh.chroromee-google.com.cn' uses the Chinese country-code top-level domain (.com.cn) with subdomain 'zh'. The second-level label 'chroromee-google' is 16 characters long containing seven vowels alongside 8 consonants, along with one hyphen. Segmentation suggests 4 words: ch, roro, mee, google. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zh.chroromee-google.com.cn/

Page Load Overview

2.42s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:959 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software94% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
94%
documentation technical
85%
blog personal website
80%
government public service
75%
download file sharing
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
223.248.224.188United States
AS138415Yancy Limited
21--

Detected Technologies2

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A582726B6AF3202A3807E0F17BA6170B6EA5D403C54BC9653ADC0A98CFC6ED458D375D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:TEvStci04T2Vcj9FlJxMkgr4XB/s2nkNQg9l6TXLw6a/Q7GyAL1eTKyJAXG69dFW:TEq8m2xwu269Qc9UwdHmq0b

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18665:5hiYkCQACBk0ICQkwpXgAlIRDsc8BQYI8uoWOiVAgeKRUBIUwiigiJAAStEiJCAk6BaDgCCMYcsRMSFBgBAwYEbIwAwrwRWk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2726e6e4fee7efbe
Perceptual Hash:f7239d88dca2568c
Difference Hash:e84c4c4c300c0e24
Wavelet Hash:260424e0fce7ff2a
Color Hash:#2dd24e

Other Hashes

Crop Resistant:e84c4c4c300c0e24

Scan History

Scan history not available

Unable to load historical scan data