# PhishDestroy domain threat record: chromeintl-google.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/chromeintl-google.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/chromeintl-google.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-20 22:59:41 UTC
- Last availability or vendor check: 2026-10-22 10:27:07 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Google

## Stored infrastructure

- Observed IP address: 104.21.12.28
- Registrar in stored WHOIS data: 杭州爱名网络有限公司
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a15b89-f6c1-76cf-b4ed-0d4bea83946c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/chromeintl-google.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.chromeintl-google.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://chromeintl-google.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has flagged chromeintl-google.com.cn as a suspicious domain. The recorded page title is “谷歌浏览器 - 快速、免费的网络浏览器 | Google Chrome下载”. The domain was first seen by PhishDestroy on 2026-10-21.

How the scam works
The site uses Google Chrome branding, which could be leveraged to trick users into downloading software or entering credentials, but no concrete evidence of such activity was observed. The listing alone does not confirm a specific malicious mechanism.

Evidence
VirusTotal analysis retrieved on 2026-10-21 scanned the domain with 92 engines and reported 0 detections. Google Safe Browsing checked on 2026-10-21 did not flag the site. External blocklists showed 0 hits, while PhishDestroy’s internal list marked the domain as suspicious on 2026-10-20. OTX had no pulses referencing the domain as of 2026-10-21.

Infrastructure
The recorded IP address for the domain is 104.21.12.28. No additional registration or hosting details are available beyond this recorded network address.

What to do
If you visited the site, verify that no credentials or personal data were entered and monitor accounts for unexpected activity. If any software was downloaded, confirm its authenticity using official sources. Defenders should add a rule to block traffic to chromeintl-google.com.cn and review logs for any connections to the recorded IP.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15b89-f6c1-76cf-b4ed-0d4bea83946c/
VirusTotal report: https://www.virustotal.com/gui/domain/chromeintl-google.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chromeintl-google.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-20 23:02:39 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/wr8wzZqM/22ddedad989c.png
  Captured: 2026-10-20 22:59:41 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a15b89-f6c1-76cf-b4ed-0d4bea83946c.png
  Captured: 2026-10-20 22:59:41 UTC
  Source report: https://urlscan.io/result/01a15b89-f6c1-76cf-b4ed-0d4bea83946c/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/278ac7f0-f13d-4988-864f-b3bac635c2df.png
  Captured: 2026-10-20 23:00:21 UTC
  Source report: https://radar.cloudflare.com/scan/278ac7f0-f13d-4988-864f-b3bac635c2df
  SHA-256: 32ab5e059cf0f588d1007e7b01ce4f2aea09bf6c03dc795b72c8e57bb43c8761
- URLQuery: https://screenshots.phishdestroy.io/uq/3940c023-80f4-4241-90b4-a43231b9a771.png
  Source report: https://urlquery.net/report/3940c023-80f4-4241-90b4-a43231b9a771
  SHA-256: 85f26185dde5801615418a71615f0d781cd5856826cda7902bf87624a1411413
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b78-4fb7-73fc-be4c-ed58745d92dd.png
  Captured: 2026-10-20 22:39:40 UTC
  Source report: https://urlscan.io/result/01a15b78-4fb7-73fc-be4c-ed58745d92dd/
  SHA-256: 4b149b9be06f4e68cdd35e32acbd832eeafb90ec25db910473c598ea76fde351
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b7a-2c8d-763a-b284-9013c2d1ef30.png
  Captured: 2026-10-20 22:41:41 UTC
  Source report: https://urlscan.io/result/01a15b7a-2c8d-763a-b284-9013c2d1ef30/
  SHA-256: f43cca5b33909f162ebc7c672feb0d43d3c3caa5b6f11d723559fa6f31867212
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b7c-1815-763e-85c2-e077f5c9a1aa.png
  Captured: 2026-10-20 22:43:48 UTC
  Source report: https://urlscan.io/result/01a15b7c-1815-763e-85c2-e077f5c9a1aa/
  SHA-256: 4b149b9be06f4e68cdd35e32acbd832eeafb90ec25db910473c598ea76fde351
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b81-abcd-74fb-b8c8-56c86df9c813.png
  Captured: 2026-10-20 22:49:52 UTC
  Source report: https://urlscan.io/result/01a15b81-abcd-74fb-b8c8-56c86df9c813/
  SHA-256: 4b149b9be06f4e68cdd35e32acbd832eeafb90ec25db910473c598ea76fde351

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T23:43:28Z",
        "uuid": "01a15b89-f6c1-76cf-b4ed-0d4bea83946c",
        "scanned_at": "2026-10-20T22:58:56Z",
        "final_url": "https://chromeintl-google.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://chromeintl-google.com.cn/",
                "from": "http://chromeintl-google.com.cn/",
                "status": 307
            }
        ],
        "ip": "172.67.131.233",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.80.73",
            "172.67.131.233"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.chromenews-google.com.cn",
            "www.google.com",
            "support.google.com",
            "chromewebstore.google.com",
            "developer.chrome.com",
            "en.chromeintl-google.com.cn",
            "zh.chromeintl-google.com.cn",
            "zh-cn.chromeintl-google.com.cn",
            "zh-tw.chromeintl-google.com.cn",
            "zh-hk.chromeintl-google.com.cn",
            "ja.chromeintl-google.com.cn",
            "ko.chromeintl-google.com.cn",
            "fr.chromeintl-google.com.cn",
            "de.chromeintl-google.com.cn",
            "es.chromeintl-google.com.cn",
            "pt.chromeintl-google.com.cn",
            "pt-br.chromeintl-google.com.cn",
            "ru.chromeintl-google.com.cn",
            "ar.chromeintl-google.com.cn",
            "it.chromeintl-google.com.cn",
            "nl.chromeintl-google.com.cn",
            "pl.chromeintl-google.com.cn",
            "sv.chromeintl-google.com.cn",
            "no.chromeintl-google.com.cn",
            "da.chromeintl-google.com.cn",
            "fi.chromeintl-google.com.cn",
            "cs.chromeintl-google.com.cn",
            "sk.chromeintl-google.com.cn",
            "hu.chromeintl-google.com.cn",
            "ro.chromeintl-google.com.cn"
        ],
        "doc_hash": "f274f13faa07a95080cd1b7587a5f6e1d372413a1eab38c2f627ef6f51495e42",
        "script_hashes": [
            "7636c7cfbc03812ab660ea36167a52d9bb0fb15f4a97afe73416d9de15d5567d"
        ],
        "globals": [
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "*.chromeintl-google.com.cn",
                "chromeintl-google.com.cn"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "chromeintl-google.com.cn",
            "protocol": "QUIC",
            "valid_to": "2027-01-18T13:19:32Z",
            "valid_from": "2026-10-20T13:19:33Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 92,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T00:21:15Z",
        "uuid": "278ac7f0-f13d-4988-864f-b3bac635c2df",
        "scanned_at": "2026-10-20T23:00:21Z",
        "final_url": "https://search.yahoo.com/",
        "status": 200,
        "history": [
            {
                "url": "https://chromeintl-google.com.cn/",
                "status": 200
            },
            {
                "url": "https://search.yahoo.com/",
                "status": 200
            }
        ],
        "dom_hash": "37e3318c1fe0b2254e81d37214cba6e0ff4b347b27b311594d0a46d63dac13c4",
        "doc_hash": "f274f13faa07a95080cd1b7587a5f6e1d372413a1eab38c2f627ef6f51495e42",
        "domain_risks": [
            "Search Engines",
            "Technology"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "geo.yahoo.com",
                "type": "CNAME",
                "value": "geo-atsv2.media.g03.yahoodns.net"
            },
            {
                "name": "geo.yahoo.com",
                "type": "CNAME",
                "value": "geo-atsv2.media.g03.yahoodns.net"
            },
            {
                "name": "loc.yahoo.com",
                "type": "CNAME",
                "value": "edge.gycpi.b.yahoodns.net"
            },
            {
                "name": "loc.yahoo.com",
                "type": "CNAME",
                "value": "edge.gycpi.b.yahoodns.net"
            },
            {
                "name": "search.yahoo.com",
                "type": "CNAME",
                "value": "w6.search-aws-l7-prod.aws.yahoo.cloud"
            },
            {
                "name": "search.yahoo.com",
                "type": "CNAME",
                "value": "w6.search-aws-l7-prod.aws.yahoo.cloud"
            }
        ],
        "dnssec_valid": false,
        "ip": "54.201.230.200",
        "whois": {
            "registrar": "MarkMonitor Inc.",
            "created": "1995-01-18T05:00:00Z",
            "updated": "2025-12-18T09:16:39Z",
            "expires": "2027-01-19T05:00:00Z",
            "nameservers": [
                "ns1.yahoo.com",
                "ns2.yahoo.com",
                "ns3.yahoo.com",
                "ns4.yahoo.com",
                "ns5.yahoo.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T00:08:23Z",
        "analysis_at": "2026-10-20T23:35:34Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "first_seen": "2026-10-20T14:53:59Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:c1c"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.12.28"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "seamus.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "colette.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "colette.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.131.233"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:83e9"
            }
        ],
        "dns_at": "2026-10-20T23:40:49Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.chromeintl-google.com.cn",
                "chromeintl-google.com.cn"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "52ed7ef9631343f4be4cbecdb6e70a129a7",
            "sha256": "704f0074d23882f7d46e0e1385753915d45e29ac6ab07c4c9c28380378516ae8",
            "subject": "chromeintl-google.com.cn",
            "valid_to": "2027-01-18T13:19:32Z",
            "valid_from": "2026-10-20T13:19:33Z"
        },
        "whois": {
            "status": [
                "ok"
            ],
            "nameservers": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-20T23:32:41Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "chromeintl-google.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-20T23:02:10Z",
            "first": "2026-10-20T23:02:10Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 6854
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "title": "谷歌浏览器 - 快速、免费的网络浏览器 | Google Chrome下载",
            "robots": "index, follow, max-image-preview:large",
            "description": "谷歌浏览器 Google Chrome 是一款快速、免费、安全的网络浏览器，支持 Windows、macOS、Linux 与移动端。内置丰富扩展与跨设备同步功能，立即下载官方版本，畅享流畅上网体验。",
            "canonicalUrl": "https://chromeintl-google.com.cn"
        },
        "trackers": {
            "requests": 40,
            "trackers": [
                {
                    "name": "Google Tag",
                    "company": "Google",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "Google Analytics",
                    "company": "Google",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                },
                {
                    "name": "Yahoo!",
                    "company": "Yahoo",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 28
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 23,
                "wait": 496,
                "connect": 19,
                "download": 1
            },
            "response_ms": 542
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 24949,
            "co2_grams": 0.0009,
            "cleaner_than": 52
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.28",
                    "host": "colette.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.184",
                    "host": "seamus.ns.cloudflare.com"
                }
            ],
            "zone": "chromeintl-google.com.cn"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "A1",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "A3",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "A1S",
                    "secure": true,
                    "session": true,
                    "same_site": "Lax"
                },
                {
                    "name": "_ebd",
                    "secure": true
                },
                {
                    "name": "sBS"
                },
                {
                    "name": "_dmit",
                    "same_site": "Lax"
                },
                {
                    "name": "_dmr",
                    "secure": true
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3034::6815:c1c",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "chromeintl-google.com.cn"
        },
        "dns": {
            "A": [
                "104.21.12.28",
                "172.67.131.233"
            ],
            "NS": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"colette.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418020291, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3034::6815:c1c",
                "2606:4700:3033::ac43:83e9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3034::6815:c1c",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://chromeintl-google.com.cn"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.google.com/chrome/",
                "https://www.chromenews-google.com.cn/",
                "https://support.google.com/chrome/",
                "https://chromewebstore.google.com/",
                "https://developer.chrome.com/docs/devtools/",
                "https://en.chromeintl-google.com.cn/",
                "https://zh.chromeintl-google.com.cn/",
                "https://zh-cn.chromeintl-google.com.cn/",
                "https://zh-tw.chromeintl-google.com.cn/",
                "https://zh-hk.chromeintl-google.com.cn/",
                "https://ja.chromeintl-google.com.cn/",
                "https://ko.chromeintl-google.com.cn/",
                "https://fr.chromeintl-google.com.cn/",
                "https://de.chromeintl-google.com.cn/",
                "https://es.chromeintl-google.com.cn/",
                "https://pt.chromeintl-google.com.cn/",
                "https://pt-br.chromeintl-google.com.cn/",
                "https://ru.chromeintl-google.com.cn/",
                "https://ar.chromeintl-google.com.cn/",
                "https://it.chromeintl-google.com.cn/",
                "https://nl.chromeintl-google.com.cn/",
                "https://pl.chromeintl-google.com.cn/",
                "https://sv.chromeintl-google.com.cn/",
                "https://no.chromeintl-google.com.cn/",
                "https://da.chromeintl-google.com.cn/"
            ],
            "external_count": 55
        },
        "whois": {
            "registrar": "杭州爱名网络有限公司",
            "created": "2026-10-20T19:00:42Z",
            "expires": "2027-10-20T19:00:42Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```