ScanMalware.com

Security Scan Report: www.wf.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9d189420-32e8-4100-af1c-a660a2b9c804Domain and IP registration (RDAP)/api/v1/rdap/9d189420-32e8-4100-af1c-a660a2b9c804How often this domain was scanned/api/v1/domain/stats/wf.gdmaoka.comScan history for this domain/api/v1/domain/history/wf.gdmaoka.com?limit=15
This website contacted 4 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.wf.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial site posing as Telegram's (TP) official download portal on a non-Telegram domain, distributing installers and telling users to bypass SmartScreen/Gatekeeper. No forms or threat-intel hits, but brand impersonation makes it high risk.

Risk Factors (4)
Impersonation of the Telegram brand on a non-Telegram domain
Suspicious third-party installer distribution with security-bypass instructions (SmartScreen/Gatekeeper/unknown sources)
Unranked domain claiming to be an official client download portal
No verifiable link to the genuine vendor's distribution channel
Domain age information unavailable

Details

Page Title

TP官方下载安装 - 正版安全一键极速安装全平台客户端

Scan Type

public

Domain Name Analysis

Domain 'www.wf.gdmaoka.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www.wf'. The registrable portion 'gdmaoka' spans 7 characters holding 3 vowels versus 4 consonants. Tokenizing the label suggests 3 words: g, dma, oka. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wf.gdmaoka.com/

Page Load Overview

3.12s
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:5,927 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software87% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
87%
documentation technical
47%
corporate
35%
government public service
33%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.118.239.62Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
114.215.183.79China
AS4134Chinanet
54--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Nginx
40%
HSTS
40%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D193D85A21BB687EB41340E5B7AA232E1638E043D51EC914FAAC06A4CF81FD9DD3375C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jmxyYYUVFHAFunK+jfIuI+58aj7llU/0dSS5T6R5508sQXutqT2U1wSA:KRYApAcnK+jfIuI+fi0drNt/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94316:AgKofEkiG14kARBVhAKELIgwx9DMAAUjqxAjyiAgCg5gtQBA2DhobiAZEUGBkgqcFAAQCNoETAEUQJvCBGS9yIIhoAQlGFka

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01013d3d1999c1c1
Perceptual Hash:8a87737871c3cee0
Difference Hash:d517617131311105
Wavelet Hash:67033f3999d9c1c1
Color Hash:N/A

Other Hashes

Crop Resistant:460680000000200e,d517617133311105

Scan History

Scan history not available

Unable to load historical scan data