ScanMalware.com

Security Scan Report: www.up.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a8cc1bf8-e090-4a8e-927b-27c7bd886e3eDomain and IP registration (RDAP)/api/v1/rdap/a8cc1bf8-e090-4a8e-927b-27c7bd886e3eHow often this domain was scanned/api/v1/domain/stats/up.gdmaoka.comScan history for this domain/api/v1/domain/history/up.gdmaoka.com?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.up.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial domain posing as the sole official download channel for the TP/TP Wallet crypto brand, pushing Android APK sideloads and telling users to ignore install warnings. No forms or malware hits, but strong brand impersonation and app-distribution risk.

Risk Factors (5)
Impersonation of a well-known crypto wallet/exchange brand on a non-brand domain
Distribution of APK install packages with instructions to bypass OS security warnings
Self-declared claim to be the 'only official download entry' with no verifiable ownership
Domain unrelated to the claimed brand and unranked in Cisco Umbrella
No verifiable corporate entity, registration, or contact details behind the site
Domain age information unavailable

Details

Page Title

TP交易所下载 - 安全快捷的数字资产交易平台官方下载入口

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.up.gdmaoka.com' on the commercial generic top-level domain (.com) with subdomain 'www.up'. Its registrable label 'gdmaoka' stretches across 7 characters with 3 vowels and 4 consonants. Word splitting yields 3 words: g, dma, oka. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.up.gdmaoka.com/

Page Load Overview

75.09s
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:5,965 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%
cryptocurrency blockchain
74%
finance banking
72%
government public service
55%
documentation technical
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.118.239.62Hong Kong
AS45753Netsec Limited
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
114.215.183.79China
AS4134Chinanet
43--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Nginx
40%
HSTS
40%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12483B72751FD6C2AF203C0D9BB79732A1269D083D50EC524BA9C0298DF89EC6DE7725D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:VYtMld0H0AGpD3N23fgsqWr6KoIyu8YRj2WY8iw/DdMep7h9A0G:2q20Fx3c66JJa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82914:AIS5ckSARBAwCAQ0TvwxQYEAGUPakAKRaIQMAGAHwTCDAuBPAAB6IQJghRAZUzNJgEAkxh/UAACIc+WYMIohYQAI4IzwY5IC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:03016d3d6d2d0181
Perceptual Hash:a2833c3c3cc6c3f3
Difference Hash:9559c9e9d9c94121
Wavelet Hash:47257d7d6d6d0181
Color Hash:N/A

Other Hashes

Crop Resistant:cbcbe0c2c0c0c8c6,9559c9e9d9c94121

Scan History

Scan history not available

Unable to load historical scan data