Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
web-google1[.]com[.]cn
“谷歌浏览器-快速安全的网络浏览器,专为您而打造”
Resumo das evidências
Analysis of the domain web-google1.com.cn shows a high‑risk, brand‑impersonation infrastructure that was taken offline prior to the report date of July 23, 2026. The domain was registered on February 21, 2026 through Web Commerce Communications Limited and resolves to the IP address 156.244.176.137, which is hosted in Hong Kong and announced by ASN 9294 GNET INC. No SSL certificate is presented for the site, indicating that communications are unencrypted. The web page returns the title "谷歌浏览器-快速安全的网络浏览器,专为您而打造," directly referencing Google and confirming the intent to masquerade as the Google browser product. The site is classified as a tech‑support scam, a common vector for credential theft and monetary extortion.
Detection evidence shows that 12 of 93 security vendors on VirusTotal flagged the domain as malicious, and the domain appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. These blocklists have already taken action to prevent resolution for end‑users. The nameservers a10.share-dns.com and b10.share-dns.net are typical of fast‑flux or shared DNS services, which can aid rapid redeployment of the infrastructure if the operator chooses to reactivate the site. Uncertainties remain regarding the specific payload or phishing pages that were served, as the site is currently offline and no additional content analysis is available.
No evidence of a valid TLS certificate, redirect chains, or additional sub‑domains was observed. Defenders should update perimeter filters to block the listed nameservers and the resolved IP address, add web-google1.com.cn to domain reputation and URL filtering lists, and monitor for any re‑registration attempts that reuse the same registrar or hosting ASN. Continuous telemetry from endpoint detection platforms should watch for the 12 vendor signatures that previously flagged the domain, as they may indicate related malicious binaries or scripts.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-20260210-3A92A5- Artefato PDF
- Evidência em PDF
Base jurídica
Texto completo da evidência
Acceptable Use Policy (AUP): The domain web-google1.com.cn is engaged in phishing activities, which directly contravenes your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing use of this domain for fraudulent purposes constitutes a violation of your TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is relevant as phishing schemes often involve unauthorized access to sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, applicable to the fraudulent activities associated with this domain.
CAN-SPAM Act: This U.S. law regulates commercial email and prohibits deceptive practices in email marketing, relevant to phishing operations that mislead recipients.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Compliance with your AUP and TOS is essential to mitigate risks associated with hosting or registering domains involved in illegal activities.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | web-google1.com.cn |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
Linha do tempo de detecção
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Acessível → Inacessível
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Inacessível → Acessível
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo