Security Scan Report: www.wkm.gdmaoka.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.wkm.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unaffiliated site claiming to be the official TP钱包 (TokenPocket) download portal on gdmaoka.com, with fabricated ICP filings. No forms or malware detected, but brand impersonation on a wallet download page is high risk.

Risk Factors (5)
Impersonation of a different entity's brand (TP钱包 / TokenPocket) on a non-official domain
Page asserts it is the official download source for a cryptocurrency wallet
Placeholder/fabricated ICP license and public-security filing numbers
Unranked domain with no verifiable affiliation to the claimed brand
Solicits installation of wallet software where seed-phrase/asset theft is the expected payoff
Domain age information unavailable

Details

Page Title

TP钱包下载入口 - 安全便捷的多链数字资产管理平台

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.wkm.gdmaoka.com' is registered; it also runs on subdomain 'www.wkm'. Count 7 characters in 'gdmaoka' holding three vowels versus 4 consonants. It segments into 3 words: g, dma, oka. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wkm.gdmaoka.com/

Page Load Overview

3.98s
Total Load Time
20 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,593 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain86% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
86%
documentation technical
85%
technology software
83%
finance banking
79%
government public service
52%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.118.238.229Hong Kong
AS45753Netsec Limited
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
53--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184920A2B30126B2F922392E9FF69731D629DD993D94F0594B5C4450EC2C4EEF8C2269E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:2iBwZIekthrgN900fFVeMw97zEb231Tnai7WrVR0UVktC2gUdQoc43PJzYqdZLr+:2OICQFV/wpj5QQ1HzYuwTGTaJq4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20297:AQCuQbLoJ8FUUCWR7GjGGAnBIEoQgVohAgABEoAbVsNJSARzDaYZqASfREQgMACRINA3cBkNCgMAXAdk0U9C4SRiotnZDDMC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:009f1fffffffefff
Perceptual Hash:bf1f626140631e1f
Difference Hash:8d6e770f0f0c0ca1
Wavelet Hash:00030183c3ffe7ff
Color Hash:#53ac69

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data