Security Scan Report: guexb.gdmaoka.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://guexb.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Unofficial look-alike page presenting itself as TPWallet's official download portal on the unrelated, unranked domain guexb.gdmaoka.com, with fake filing numbers. Do not download wallet installers here.

Risk Factors (5)
Brand impersonation of a different entity (TPWallet) on a mismatched domain
Distribution of wallet installers from a non-official host (potential trojanized APK)
Fabricated/placeholder ICP and public-security filing numbers
Unranked domain claiming to be a major brand's official entrance
Keyword-stuffed SEO page engineered for brand-name search traffic
Domain age information unavailable

Details

Page Title

tp钱包官网下载最新版本 - 安全高速TPWallet官方入口与功能介绍other network

Scan Type

public

Domain Name Analysis

The domain 'guexb.gdmaoka.com' uses the commercial generic top-level domain (.com) with subdomain 'guexb'. Count 7 characters in 'gdmaoka' containing three vowels alongside four consonants. It segments into three words: g, dma, oka. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://guexb.gdmaoka.com/

Page Load Overview

N/A
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,213 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain95% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
95%
finance banking
84%
technology software
81%
government public service
46%
documentation technical
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.118.238.229Hong Kong
AS45753Netsec Limited
1183.240.98.228China
AS56040China Mobile communications corporation
02--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A9A209372612192F6322B1E9AB35336D615CFE53DA0702E8D5E0818E66D4FEF1C3259E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:YcfMiU7hFUz637z+YQ84agyIyJoEDQ1is43axaoMoAwRkDFQ80s0J6g9sWpU0/+K:TdDCLJcis4CLlYe80sA6gyaXLt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22956:hCSBBADponYBYkOJSBEIASGA0oSAgR4MCAYOkA6TEEEDFQgVn2qwEr0gHkRKEJwrmAMGABlQYgRJQElA0ATIAsSMkJEyFINi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:aa5e81f60b18f789
Difference Hash:71615571710c92db
Wavelet Hash:00000000ffffffff
Color Hash:#bd6ce0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data