chromekz[.]com
Análisis de phishing y seguridad de chromekz.com
“Chrome插件,谷歌浏览器插件下载,谷歌商店插件crx应用分享与下载-Chrome扩展网”
chromekz.com — Contenido no disponible (HTTP 502). Suplantación de marca: Chatgpt; Tipo de estafa: Generic Phishing. Resumen de las pruebas: VirusTotal 7/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, Fortinet); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 77/100. Registrador: Alibaba Cloud Computing.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
This report analyzes the domain chromekz.com, which presents itself as a Chrome extension download site under the title "Chrome插件,谷歌浏览器插件下载,谷歌商店插件crx应用分享与下载-Chrome扩展网". The site is classified as a Google Phishing threat, indicating it is designed to impersonate legitimate Google services to steal user credentials or other sensitive information. The specific risk involves users being tricked into entering login details under the guise of downloading browser extensions.
Technical evidence shows the domain was flagged by 7 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, and Fortinet. It appears on 3 blocklists. The domain was registered on 2026-02-21 through Alibaba Cloud Computing Ltd. d/b/a HiChina, with nameservers dns11.hichina.com and dns12.hichina.com. The IP address 120.79.71.44 is located in China and is hosted by AS37963 Hangzhou Alibaba Advertising Co.,Ltd. The site has no SSL certificate.
As of the current assessment, the domain is marked as DOWN/OFFLINE. The risk level is high due to the confirmed phishing classification and multiple vendor flags, though the immediate threat is mitigated by the site being non-operational. Users should avoid any attempts to access this domain.
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
PD-20260210-9BB601 Recipient: domainabuse@service.aliyun.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.