Security Report: proton-vpns.com.cn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ed364a9b-7558-4c7a-80d7-b22b0b8fc18a Domain and IP registration (RDAP)/api/v1/rdap/ed364a9b-7558-4c7a-80d7-b22b0b8fc18aHow often this domain was scanned/api/v1/domain/stats/proton-vpns.com.cn Scan history for this domain/api/v1/domain/history/proton-vpns.com.cn?limit=15

This website contacted 9 IPs in 6 countries across 9 domains to perform 31 HTTP transactions. The main domain is proton-vpns.com.cn and was registered 1 week ago.

Submitted URL: https://proton-vpns.com.cn/

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Unofficial 9-day-old Proton VPN lookalike reported as phishing; it funnels visitors to a third-party app via shared Apple IDs and hides installer links to unrelated domains. Do not download or enter accounts.

Risk Factors (5)

Brand mismatch: Proton VPN branding on an unofficial, 9-day-old lookalike domain (proton-vpns.com.cn)

Bait-and-switch funnel steering visitors to a third-party app via shared Apple ID accounts

Hidden off-site download links to unrelated domains (lanzouc.com, sxsjxe.cn) offering .exe/.dmg/.apk installers

Primary domain reported as phishing (single-source, unverified)

Network IDS HIGH alert: ET DROP Spamhaus DROP listed traffic

Domain age information unavailable

Details

Page Title

使用 VPN 畅享无界互联网｜Proton VPN

Scan Type

public

Favicon Hash

MMH3: -1051502745

MD5: d9acbd4d72777f5ce75584190bcc1400

Domain Name Analysis

Domain 'proton-vpns.com.cn' uses the Chinese country-code top-level domain (.com.cn) and has no subdomain. Count 11 characters in 'proton-vpns' holding 2 vowels versus eight consonants, notching one hyphen. Tokenizing the label suggests 3 words: proton, vpn, s. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.21s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:62%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:8,054 chars

Detector Agreement:80%

Website Classification

Primary Category

technology software58% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

58%

documentation technical

38%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	176.65.132.146	Amsterdam, North Holland, Netherlands	AS197170TechTies Inc.
3	43.159.107.113	Singapore	AS139341ACE
3	103.135.250.12	Kwai Chung, Kwai Tsing District, Hong Kong	AS906DMIT Cloud Services
3	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
3	150.171.109.99Azure · CLOUD	United States	AS8075Microsoft Corporation
3	51.8.71.184Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
3	27.159.90.74	China	AS4134Chinanet
3	150.171.109.98Azure · CLOUD	United States	AS8075Microsoft Corporation
3	4.153.72.49Azure · CLOUD	Boydton, Virginia, United States	AS8075Microsoft Corporation
31	9	-	-