ScanMalware.com

Security Scan Report: www.lkz.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d9a4e07d-7027-4872-bd2b-5d040c513de5Domain and IP registration (RDAP)/api/v1/rdap/d9a4e07d-7027-4872-bd2b-5d040c513de5How often this domain was scanned/api/v1/domain/stats/lkz.gdmaoka.comScan history for this domain/api/v1/domain/history/lkz.gdmaoka.com?limit=15
This website contacted 5 IPs in 4 countries across 4 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.lkz.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Counterfeit 'tpwallet official download' site on an unrelated subdomain, offering wallet apps under another brand's name with a fabricated ICP filing. Do not download software or enter any seed phrase.

Risk Factors (4)
Brand impersonation of the tpwallet / TP Wallet cryptocurrency wallet on a non-official domain
Offers executable desktop and mobile wallet downloads from a domain that is not the brand owner's
Fabricated/placeholder ICP registration number used to fake Chinese regulatory compliance
Unranked domain presenting itself as a major wallet provider
Domain age information unavailable

Details

Page Title

tpwallet官网下载 - 安全高效的Web3多链资产管理平台

Scan Type

public

Domain Name Analysis

The domain name 'www.lkz.gdmaoka.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www.lkz'. The second-level label 'gdmaoka' is 7 characters long holding three vowels versus 4 consonants. Splitting it apart reveals three words: g, dma, oka. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.lkz.gdmaoka.com/

Page Load Overview

75.19s
Total Load Time
77 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,794 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
corporate
35%
cryptocurrency
22%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.118.238.229Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
1104.26.4.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
114.215.183.79China
AS4134Chinanet
55--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Nginx
40%
HSTS
40%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103C20926A3142A2E523752ECEF74B7BD226CE753E40E01A991F98118D6C0EDEDC335C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:w8iHFx5bXAVsp+pgTh/Z05qGE4He8d0eqMXEXyE:S5c+p+UBgxVnXEXyE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26257:ZQWXRgAJUJHVgkUXA8AJTCAMEMRyMASiRoQ8CjAyAArUhZgTg6UQPAQQACMkkIjBcmBEDUcgMGIObIwIAOACg0XLagaQE5pE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7c3ffffffffff
Perceptual Hash:f7623d5b0d4a3921
Difference Hash:500c0e08000c4c33
Wavelet Hash:00c2c2f6ffe7ab80
Color Hash:#7740bf

Other Hashes

Crop Resistant:500c0e08000c4c33,010125d6d6010101

Scan History

Scan history not available

Unable to load historical scan data