ScanMalware.com

Security Scan Report: www.rag.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/de692688-256e-47ce-ab45-119f76f9a6a5Domain and IP registration (RDAP)/api/v1/rdap/de692688-256e-47ce-ab45-119f76f9a6a5How often this domain was scanned/api/v1/domain/stats/rag.gdmaoka.comScan history for this domain/api/v1/domain/history/rag.gdmaoka.com?limit=15
This website contacted 4 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.rag.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Non-official domain presents itself as the official TP钱包 (TokenPocket) wallet download site and urges users to install an app from rag.gdmaoka.com. Brand impersonation with fake filing details; do not download.

Risk Factors (4)
Brand impersonation of TP钱包/TokenPocket on an unrelated, unranked domain
Self-declared 'official download' channel for a cryptocurrency wallet on a non-brand domain (potential fraudulent APK/app distribution)
Fabricated/placeholder Chinese ICP and public-security filing numbers
Heavy SEO keyword stuffing around 'official download' to capture wallet-install search traffic
Domain age information unavailable

Details

Page Title

官方推荐：2024最新下载tp钱包官网app下载 - 全球安全多链资产管理平台

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.rag.gdmaoka.com' is registered with subdomain 'www.rag'. The registrable portion 'gdmaoka' spans 7 characters containing three vowels alongside 4 consonants. Breaking it apart gives three words: g, dma, oka. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.rag.gdmaoka.com/

Page Load Overview

3.13s
Total Load Time
20 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,272 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software85% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
85%
cryptocurrency blockchain
65%
finance banking
64%
government public service
42%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.118.238.229Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1183.240.98.228China
AS56040China Mobile communications corporation
54--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A3922A2B70111A7F633372ECFF65A35C62ACE953F8676654A1E4C04D52C0EEF492168E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:WKEi6zyc7DsLQg2iQal235VvVu/0YWWX4:WKyqFYXX3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20567:BQAVpaB8QiQVQSo3MABCAzccgcSFOFgAkLdGpi0Qc6iAECzJDABAQDCCxBgCCKIbAKAgAJSqjhMAKssA6YZkYqJQJuIEBAau

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7c3e7ffffe7ff
Perceptual Hash:b3734e1d4c3a2a33
Difference Hash:330c0f0f0f0e0ca1
Wavelet Hash:00c28383c3ffc3fb
Color Hash:#4f783a

Other Hashes

Crop Resistant:330c0f0f0f0e0ca1,0101010d0d010909

Scan History

Scan history not available

Unable to load historical scan data