Security Scan Report: sgqdx.gdmaoka.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://sgqdx.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Unofficial site posing as the official Telegram (TP) Android download channel on a mismatched, unranked domain, distributing APKs with unknown-source sideloading instructions. No malware hit was detected, but installing apps from this source is unsafe.

Risk Factors (3)
Impersonation of Telegram's brand presented as an official download source on a non-official domain
Unofficial APK distribution channel with instructions to disable unknown-source install protections
Unranked, low-legitimacy host offering downloads for a major messaging brand
Domain age information unavailable

Details

Page Title

TP安卓版下载 - 官方正版安全高速一键安装

Scan Type

public

Domain Name Analysis

The domain name 'sgqdx.gdmaoka.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sgqdx'. The second-level label 'gdmaoka' is 7 characters long with three vowels and 4 consonants. Segmentation suggests three words: g, dma, oka. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sgqdx.gdmaoka.com/

Page Load Overview

75.16s
Total Load Time
21 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:5,463 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software80% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
80%
download file sharing
57%
social media network
54%
government public service
54%
documentation technical
46%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.118.238.229Hong Kong
AS45753Netsec Limited
114.215.183.79China
AS4134Chinanet
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
33--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E293D91A25FB647AB51381F977AB231A2679E043C51EC914FA9C02A4CF81FDADD2374C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:IbefxLo4bd5K+JDIuI+fnoS57Zz1cYgQp0QJZYdsAk/hpcRtbTDsI:NJLo4bd5K+JDIuI+A44Y3YoURlTp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:91546:HGI3SIIIkkAhApBkCQgBMRj2LSDDLESguRBUAECG1uAwRB0QICcBZaI+q0kLWAkwlYhFMhiCgjjEJpYElC4BSAQ5URIBwgIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:41013d3d19198181
Perceptual Hash:8a837178ced3ce70
Difference Hash:d517616935311101
Wavelet Hash:6f033f3d1999c1c1
Color Hash:#40acbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data