Security Report: www.wcde.gdmaoka.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d9a0e8f8-5533-4970-990d-b639cabb4307 Domain and IP registration (RDAP)/api/v1/rdap/d9a0e8f8-5533-4970-990d-b639cabb4307How often this domain was scanned/api/v1/domain/stats/wcde.gdmaoka.com Scan history for this domain/api/v1/domain/history/wcde.gdmaoka.com?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.wcde.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 76%

Risk Score

Unranked third-party site presenting itself as the official Telegram ('TP') download portal and coaching users to bypass SmartScreen/unknown-source warnings; no IoC or forms detected, but brand impersonation plus installer distribution makes it unsafe.

Risk Factors (4)

Claims to be the official Telegram download site on a non-official, unranked domain

Guidance to bypass SmartScreen/Gatekeeper and allow unknown-source installs

No verifiable ownership or affiliation with the brand it claims to represent

Binary distribution page with heavy SEO content typical of impersonation portals

Domain age information unavailable

Details

Page Title

TP官方下载安装 - 正版安全一键极速安装全平台客户端

Scan Type

public

Domain Name Analysis

The domain name 'www.wcde.gdmaoka.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www.wcde'. Count 7 characters in 'gdmaoka' holding three vowels versus four consonants. Tokenizing the label suggests three words: g, dma, oka. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.11s

Total Load Time

33 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:5,927 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software87% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

87%

documentation technical

47%

corporate

35%

government public service

33%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.118.239.62	Hong Kong	AS45753Netsec Limited
1	111.45.3.198	China	AS9808China Mobile Communications Group Co., Ltd.
1	14.215.183.79	China	AS4134Chinanet
4	3	-	-

Detected Technologies4

Open-Graph-Protocolvwebsite

100%

Nginx

40%

HSTS

40%

Baidu Analytics (百度统计)

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D193D85A21BB687EB41340E5B7AA232E1638E043D51EC914FAAC06A4CF81FD9DD3375C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jmxyYYUVFHAFunK+jfIuI+58aj7llU/0dSS5T6R5508sQXutqT2U1wSA:KRYApAcnK+jfIuI+fi0drNt/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94316:AgKofEkiG14kARBVhAKELIgwx9DMAAUjqxAjyiAgCg5gtQBA2DhobiAZEUGBkgqcFAAQCNoETAEUQJvCBGS9yIIhoAQlGFka

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:61013d3d19190101

Perceptual Hash:8a83737071c3cef4

Difference Hash:d5176171b1312105

Wavelet Hash:6f033f3d199991c1

Color Hash:#53a0ac

Other Hashes

Crop Resistant:460680000000200e,d5176171b3312105

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.wcde.gdmaoka.com