ScanMalware.com

Security Scan Report: xwlt.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/88bbe119-a33b-467c-a2c7-c40668344ed6Domain and IP registration (RDAP)/api/v1/rdap/88bbe119-a33b-467c-a2c7-c40668344ed6How often this domain was scanned/api/v1/domain/stats/xwlt.gdmaoka.comScan history for this domain/api/v1/domain/history/xwlt.gdmaoka.com?limit=15
This website contacted 4 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://xwlt.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial look-alike site claiming to be the 'TP Wallet official website' and pushing a wallet client/seed-phrase import from an unrelated unranked domain — brand impersonation; do not download or enter a mnemonic.

Risk Factors (5)
Brand impersonation of TP Wallet / TokenPocket on a non-official, unrelated domain
Solicits download of an 'official' crypto wallet client from an unofficial host (malware/fake-wallet distribution vector)
Prompts users toward mnemonic/seed-phrase import flows
Unauthenticated, unranked domain claiming to be a major crypto brand's official site
Page text explicitly addresses the topic of avoiding 'fake' sites while itself being one
Domain age information unavailable

Details

Page Title

tp钱包最新版官网 - 安全便捷的数字资产管理首选

Scan Type

public

Domain Name Analysis

The domain name 'xwlt.gdmaoka.com' uses the commercial generic top-level domain (.com), featuring subdomain 'xwlt'. The second-level label 'gdmaoka' is 7 characters long with 3 vowels and 4 consonants. It segments into 3 words: g, dma, oka. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xwlt.gdmaoka.com/

Page Load Overview

3.23s
Total Load Time
21 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,859 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
62%
technology software
59%
finance banking
49%
corporate
35%
cryptocurrency
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.118.238.229Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1183.240.98.228China
AS56040China Mobile communications corporation
54--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Nginx
40%
HSTS
40%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6B21A376412203B967772E4FF31B32C629DE813EC4B069591F5895D82C1EFA4C226AF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:iu0+zswn5tsUhxL7r1zNS1CuKWz5tI+HL:e+n5yUhD4wAbL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24287:ARsBBVJUCEgCMgK4YhqQIloxjSRCqwhQjsCItgABKAAFQsZpJRFIIhQJUQhF6iK64kwjQJUA4QNyAgKlKACQJGSIcMGkCCmB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ff818183ff
Perceptual Hash:bcc3c33cc3c33c31
Difference Hash:600e0e0f3b333b00
Wavelet Hash:a0e7c3e7818181ff
Color Hash:#8e53ac

Other Hashes

Crop Resistant:600e0e0f3b333b00,73eddcccc4cc6933,fffff3f3f3f3fff7

Scan History

Scan history not available

Unable to load historical scan data