# PhishDestroy domain threat record: chrometab-google.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/chrometab-google.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/chrometab-google.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 12:54:55 UTC
- Last availability or vendor check: 2026-10-23 12:54:55 UTC
- Stored record updated: 2026-10-23 18:20:58 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Google

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: 温州市中网计算机技术服务有限公司
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-20 19:00:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a168d2-b29f-7644-add5-debc15571238/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/chrometab-google.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.chrometab-google.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://chrometab-google.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI marked the page as malicious because it pretends to be Google Chrome and offers a download from a non‑official domain. The recorded page title is “谷歌浏览器 Chrome 下载 - 快速免费的网络浏览器” and the excerpt includes “获取 Chrome 官方版本”. The domain was first seen by PhishDestroy on 2026-10-23 and returned an HTTP 200 response at that time.

How the scam works
Impersonation sites copy the branding and wording of legitimate software distributors to trick users into downloading a counterfeit installer. The fake installer may contain malware, unwanted programs, or credential‑stealing components that execute when run. This category is commonly referred to as a malicious download or software‑impersonation scam.

Evidence
VirusTotal scanned the domain on 2026-10-21 and reported 0 malicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. OTX listed three pulses referencing the domain as of 2026-10-23. urlscan.io’s engine analysis on 2026-10-23 marked the page as malicious with a score of 91, while its overall verdict was non‑malicious, and PhishDestroy’s internal blocklist also contains the domain.

Infrastructure
The page was served from the recorded IPs 188.114.97.3 and 188.114.96.3 on the Cloudflare network, recorded in GB. TLS was provided by a Let’s Encrypt certificate issued on 2026-10-20 and valid until 2027-01-18. The domain age and apex age were both recorded as 0 days, indicating a very recent registration, and the TLS certificate was 2 days old at the time of capture. Nameservers were colette.ns.cloudflare.com and seamus.ns.cloudflare.com.

What to do
Do not download any software from this site; obtain Chrome only from the official Google Chrome page. Security teams should block chrometab-google.com.cn at the firewall, monitor outbound connections to its recorded IPs, and review logs for any user activity that accessed the page.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a168d2-b29f-7644-add5-debc15571238/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d681dd54-c68e-429f-a011-92ea0403a778
URLQuery report: https://urlquery.net/report/65c58158-2d0d-4da9-88b3-e8741f1f5509
Stored capture screenshot: https://i.ibb.co/SDnKbqKH/3b2ddebaa1d2.png
Cloudflare Radar screenshot (2026-10-23T13:26:21Z): https://screenshots.phishdestroy.io/cf/d681dd54-c68e-429f-a011-92ea0403a778.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/65c58158-2d0d-4da9-88b3-e8741f1f5509.png
URLScan screenshot (2026-10-23T12:53:00Z): https://screenshots.phishdestroy.io/us/01a168d2-2bdb-726f-9cc6-311326a89942.png
URLScan capture report: https://urlscan.io/result/01a168d2-2bdb-726f-9cc6-311326a89942/
VirusTotal report: https://www.virustotal.com/gui/domain/chrometab-google.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chrometab-google.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 13:30:24 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/SDnKbqKH/3b2ddebaa1d2.png
  Captured: 2026-10-23 12:54:55 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a168d2-b29f-7644-add5-debc15571238.png
  Captured: 2026-10-23 12:54:55 UTC
  Source report: https://urlscan.io/result/01a168d2-b29f-7644-add5-debc15571238/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d681dd54-c68e-429f-a011-92ea0403a778.png
  Captured: 2026-10-23 13:26:21 UTC
  Source report: https://radar.cloudflare.com/scan/d681dd54-c68e-429f-a011-92ea0403a778
  SHA-256: a2fd0b092a1be097e81c07569350564d68bdc067646db27f1758038f06858ee1
- URLQuery: https://screenshots.phishdestroy.io/uq/65c58158-2d0d-4da9-88b3-e8741f1f5509.png
  Source report: https://urlquery.net/report/65c58158-2d0d-4da9-88b3-e8741f1f5509
  SHA-256: ecd4db8640e201ffece9628113ffd081f9ce1fdc9d09b7af8480a798a9e90df3
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168d2-2bdb-726f-9cc6-311326a89942.png
  Captured: 2026-10-23 12:53:00 UTC
  Source report: https://urlscan.io/result/01a168d2-2bdb-726f-9cc6-311326a89942/
  SHA-256: 6db8b3964bd03234a946cae292dd9494eb2ee5ac639581857c513cec071e86d5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T12:56:08Z",
        "uuid": "01a168d2-b29f-7644-add5-debc15571238",
        "scanned_at": "2026-10-23T12:53:27Z",
        "final_url": "https://chrometab-google.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://chrometab-google.com.cn/",
                "from": "http://chrometab-google.com.cn/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "ips": [
            "188.114.96.3"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.google.com",
            "support.google.com",
            "chromewebstore.google.com",
            "developer.chrome.com",
            "en.chrometab-google.com.cn",
            "zh.chrometab-google.com.cn",
            "zh-cn.chrometab-google.com.cn",
            "zh-tw.chrometab-google.com.cn",
            "zh-hk.chrometab-google.com.cn",
            "ja.chrometab-google.com.cn",
            "ko.chrometab-google.com.cn",
            "fr.chrometab-google.com.cn",
            "de.chrometab-google.com.cn",
            "es.chrometab-google.com.cn",
            "pt.chrometab-google.com.cn",
            "pt-br.chrometab-google.com.cn",
            "ru.chrometab-google.com.cn",
            "ar.chrometab-google.com.cn",
            "it.chrometab-google.com.cn",
            "nl.chrometab-google.com.cn",
            "pl.chrometab-google.com.cn",
            "sv.chrometab-google.com.cn",
            "no.chrometab-google.com.cn",
            "da.chrometab-google.com.cn",
            "fi.chrometab-google.com.cn",
            "cs.chrometab-google.com.cn",
            "sk.chrometab-google.com.cn",
            "hu.chrometab-google.com.cn",
            "ro.chrometab-google.com.cn",
            "el.chrometab-google.com.cn"
        ],
        "doc_hash": "e5ea6aa21fc8ce74f3512848a109576e90a118a0c7b1a3dcc76120607f7e730b",
        "script_hashes": [
            "7636c7cfbc03812ab660ea36167a52d9bb0fb15f4a97afe73416d9de15d5567d"
        ],
        "tls": {
            "san": [
                "*.chrometab-google.com.cn",
                "chrometab-google.com.cn"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "chrometab-google.com.cn",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T13:14:49Z",
            "valid_from": "2026-10-20T13:14:50Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T13:29:14Z",
        "uuid": "d681dd54-c68e-429f-a011-92ea0403a778",
        "scanned_at": "2026-10-23T13:26:21Z",
        "final_url": "https://search.yahoo.com/",
        "status": 200,
        "history": [
            {
                "url": "https://chrometab-google.com.cn/",
                "status": 200
            },
            {
                "url": "https://search.yahoo.com/",
                "status": 200
            }
        ],
        "dom_hash": "d280fb0fe55b8b58410a6412b81bfeee730792079770c13400629674910e563e",
        "doc_hash": "304d728da208e4f212f57daf33ccd604a20de6c321444aa9d595f320629ac1d9",
        "domain_risks": [
            "Search Engines",
            "Technology"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "geo.yahoo.com",
                "type": "CNAME",
                "value": "geo-atsv2.media.g03.yahoodns.net"
            },
            {
                "name": "geo.yahoo.com",
                "type": "CNAME",
                "value": "geo-atsv2.media.g03.yahoodns.net"
            },
            {
                "name": "loc.yahoo.com",
                "type": "CNAME",
                "value": "edge.gycpi.b.yahoodns.net"
            },
            {
                "name": "loc.yahoo.com",
                "type": "CNAME",
                "value": "edge.gycpi.b.yahoodns.net"
            },
            {
                "name": "search.yahoo.com",
                "type": "CNAME",
                "value": "w6.search-aws-l7-prod.aws.yahoo.cloud"
            },
            {
                "name": "search.yahoo.com",
                "type": "CNAME",
                "value": "w6.search-aws-l7-prod.aws.yahoo.cloud"
            }
        ],
        "dnssec_valid": false,
        "ip": "54.201.230.200",
        "whois": {
            "registrar": "MarkMonitor Inc.",
            "created": "1995-01-18T05:00:00Z",
            "updated": "2025-12-18T09:16:39Z",
            "expires": "2027-01-19T05:00:00Z",
            "nameservers": [
                "ns1.yahoo.com",
                "ns2.yahoo.com",
                "ns3.yahoo.com",
                "ns4.yahoo.com",
                "ns5.yahoo.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T13:26:14Z",
        "analysis_at": "2026-10-21T12:48:05Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "first_seen": "2026-10-20T22:43:17Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.78.65"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:4e41"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:d970"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "colette.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "colette.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.217.112"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "seamus.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-21T12:50:56Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.chrometab-google.com.cn",
                "chrometab-google.com.cn"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6612d3b5777d1c1d9f3f00a3dbe0a9425a8",
            "sha256": "ff2efef7460b07f153869eefd03f78240d8a3ffec88aa18d7fa192118860aa98",
            "subject": "chrometab-google.com.cn",
            "valid_to": "2027-01-18T13:14:49Z",
            "valid_from": "2026-10-20T13:14:50Z"
        },
        "whois": {
            "status": [
                "ok"
            ],
            "nameservers": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T13:29:36Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "chrometab-google.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T12:56:55Z",
            "first": "2026-10-23T12:56:55Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 5946
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "title": "谷歌浏览器 Chrome 下载 - 快速免费的网络浏览器",
            "robots": "index, follow, max-image-preview:large",
            "description": "谷歌浏览器 Chrome 官方下载入口。快速、免费、安全，支持 Windows、macOS、Linux 与移动端，内置丰富扩展与跨设备同步功能。立即获取最新版本，畅享流畅上网体验。",
            "canonicalUrl": "https://chrometab-google.com.cn"
        },
        "trackers": {
            "requests": 0
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 495,
                "tls": 46,
                "wait": 451,
                "connect": 6,
                "download": 0
            },
            "response_ms": 998
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 18648,
            "co2_grams": 0.0007,
            "cleaner_than": 58
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.28",
                    "host": "colette.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.184",
                    "host": "seamus.ns.cloudflare.com"
                }
            ],
            "zone": "chrometab-google.com.cn"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "A1",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "A3",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "A1S",
                    "secure": true,
                    "session": true,
                    "same_site": "Lax"
                },
                {
                    "name": "_ebd",
                    "secure": true
                },
                {
                    "name": "sBS"
                },
                {
                    "name": "_dmit",
                    "same_site": "Lax"
                },
                {
                    "name": "_dmr",
                    "secure": true
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "chrometab-google.com.cn"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"colette.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418019924, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://chrometab-google.com.cn"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.google.com/chrome/",
                "https://support.google.com/chrome/",
                "https://chromewebstore.google.com/",
                "https://developer.chrome.com/docs/devtools/",
                "https://en.chrometab-google.com.cn/",
                "https://zh.chrometab-google.com.cn/",
                "https://zh-cn.chrometab-google.com.cn/",
                "https://zh-tw.chrometab-google.com.cn/",
                "https://zh-hk.chrometab-google.com.cn/",
                "https://ja.chrometab-google.com.cn/",
                "https://ko.chrometab-google.com.cn/",
                "https://fr.chrometab-google.com.cn/",
                "https://de.chrometab-google.com.cn/",
                "https://es.chrometab-google.com.cn/",
                "https://pt.chrometab-google.com.cn/",
                "https://pt-br.chrometab-google.com.cn/",
                "https://ru.chrometab-google.com.cn/",
                "https://ar.chrometab-google.com.cn/",
                "https://it.chrometab-google.com.cn/",
                "https://nl.chrometab-google.com.cn/",
                "https://pl.chrometab-google.com.cn/",
                "https://sv.chrometab-google.com.cn/",
                "https://no.chrometab-google.com.cn/",
                "https://da.chrometab-google.com.cn/",
                "https://fi.chrometab-google.com.cn/"
            ],
            "external_count": 54
        },
        "whois": {
            "registrar": "温州市中网计算机技术服务有限公司",
            "created": "2026-10-20T19:00:44Z",
            "expires": "2027-10-20T19:00:44Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "colette.ns.cloudflare.com",
                "seamus.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```