ScanMalware.com

Security Scan Report: kehv.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e91016b-7050-44b9-bcc3-ac425a1b8ea3Domain and IP registration (RDAP)/api/v1/rdap/6e91016b-7050-44b9-bcc3-ac425a1b8ea3How often this domain was scanned/api/v1/domain/stats/kehv.gdmaoka.comScan history for this domain/api/v1/domain/history/kehv.gdmaoka.com?limit=15
This website contacted 2 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://kehv.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Unofficial look-alike page claiming to be the TP Wallet official download/registration site. No forms or IoC hits, but brand impersonation plus APK/IPA download lures make it unsafe; do not install anything from it.

Risk Factors (4)
Brand impersonation of a different entity (TP Wallet / TokenPocket) on a non-official domain
Promotes side-loading of APK/IPA wallet binaries from an unofficial source
Unranked domain claiming to be a major brand's official site
Keyword-stuffed doorway-style content with no real company identity, legal pages, or support contact
Domain age information unavailable

Details

Page Title

TP钱包官网正版下载注册入口 - 安全管理数字资产首选

Scan Type

public

Domain Name Analysis

You're looking at domain 'kehv.gdmaoka.com' on the commercial generic top-level domain (.com) with subdomain 'kehv'. The second-level label 'gdmaoka' is 7 characters long containing three vowels alongside four consonants. Word splitting yields 3 words: g, dma, oka. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kehv.gdmaoka.com/

Page Load Overview

75.09s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,522 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software45% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
45%
finance banking
42%
cryptocurrency blockchain
35%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.118.239.62Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
32--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T102A23A3B5002256B967373DDFF76736DA16CE922C94F099CA1E4C24C82C6ED65C219CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:/jGR+uJEoQNQYRpOCfOtnN2TW24C7qqW8:/+jRCjfOtnOhO8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21310:AMaUYIAKXdiCnEHX0wtmAS+geAUJwgMnUepEBSDgXxVMDwRC6CTAQADADgEHABAARAXcZAQBKiAMKYMYgTiYJanKJqMTxAJc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008fdfdfffffffdf
Perceptual Hash:b83f274778434927
Difference Hash:333c3e3030a8ac30
Wavelet Hash:00078f8fcf4f078f
Color Hash:N/A

Other Hashes

Crop Resistant:333c3e3030a8ac30,010141cbcb110303

Scan History

Scan history not available

Unable to load historical scan data