ScanMalware.com

Security Scan Report: www.dlcps.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e8efad43-a2a2-42ad-8594-447ddd2e8af3Domain and IP registration (RDAP)/api/v1/rdap/e8efad43-a2a2-42ad-8594-447ddd2e8af3How often this domain was scanned/api/v1/domain/stats/dlcps.gdmaoka.comScan history for this domain/api/v1/domain/history/dlcps.gdmaoka.com?limit=15
This website contacted 6 IPs in 4 countries across 4 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://www.dlcps.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 76%

7
Risk Score

Clone site presenting itself as the official tpwallet download page on an unrelated, unranked domain with forged Chinese filing numbers. No in-page credential form found, but wallet installers from this host should not be trusted — download only from the vendor's real site.

Risk Factors (4)
Brand impersonation of a cryptocurrency wallet (tpwallet) on a non-official domain
Unranked domain hosting purported official wallet installers
Fabricated/placeholder ICP and public-security filing numbers
Distribution of third-party wallet software outside the vendor's official channels
Domain age information unavailable

Details

Page Title

tpwallet官网下载 - 安全高效的Web3多链资产管理平台

Scan Type

public

Domain Name Analysis

The domain name 'www.dlcps.gdmaoka.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www.dlcps'. The registrable portion 'gdmaoka' spans 7 characters holding three vowels versus four consonants. Word splitting yields three words: g, dma, oka. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.dlcps.gdmaoka.com/

Page Load Overview

75.14s
Total Load Time
77 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,794 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
corporate
35%
cryptocurrency
22%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.118.238.229Hong Kong
AS45753Netsec Limited
014.215.183.79China
AS4134Chinanet
0104.26.4.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
0111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
0172.67.74.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
56--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Nginx
40%
HSTS
40%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0C2096A53142A3E563712DCEF64B7BD2268E753E40A01A8D1FE4128DAC0EDEDC335D9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:wpinMx5bXAVsp+pgTGsZ05qGEv+3j10qEiFhQyE:Ric+p+bogxaKFhQyE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26325:7kMYAiMhEBgFEAEMwg+UI5iA6AHzIAGTmZVGE1ggEAzVixmhgGchIFSGkIwpJAAYIASofSHZch2GEaBO2iSwEiBBWiBfNE7y

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7c3ffffffffff
Perceptual Hash:f7623d5b0d4a3921
Difference Hash:500c0e08000c4c33
Wavelet Hash:00c2c2f6ffe7ab80
Color Hash:#ae2dd2

Other Hashes

Crop Resistant:500c0e08000c4c33,010125d6d6010101

Scan History

Scan history not available

Unable to load historical scan data