ScanMalware.com

Security Scan Report: tqmo.gdmaoka.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f5f8b134-b324-4561-b8cd-060534ad3a8bDomain and IP registration (RDAP)/api/v1/rdap/f5f8b134-b324-4561-b8cd-060534ad3a8bHow often this domain was scanned/api/v1/domain/stats/tqmo.gdmaoka.comScan history for this domain/api/v1/domain/history/tqmo.gdmaoka.com?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is gdmaoka.com and was registered 1 year 8 months ago.

Submitted URL: https://tqmo.gdmaoka.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake 'official' TP钱包 download site on an unrelated unranked domain (tqmo.gdmaoka.com) pushing a wallet APK — classic brand-impersonation/drainer delivery. No forms were found, but never install software from it.

Risk Factors (5)
Brand impersonation of TP钱包 on a non-official, unranked domain
Pushes APK/side-loaded app downloads for a crypto wallet, bypassing official app stores
Self-declares its unrelated domain to be the 'official' download address, conditioning users to trust a fake channel
Fabricated placeholder regulatory registration numbers signal a fake corporate identity
Page text pre-emptively warns about phishing while itself being unverifiable as the brand
Domain age information unavailable

Details

Page Title

官方推荐：2024最新下载tp钱包官网app下载 - 全球安全多链资产管理平台

Scan Type

public

Domain Name Analysis

The domain 'tqmo.gdmaoka.com' uses the commercial generic top-level domain (.com) and includes subdomain 'tqmo'. The registrable portion 'gdmaoka' spans 7 characters holding three vowels versus four consonants. Word splitting yields three words: g, dma, oka. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tqmo.gdmaoka.com/

Page Load Overview

4.88s
Total Load Time
20 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,278 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software79% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
79%
finance banking
67%
cryptocurrency blockchain
66%
government public service
48%
corporate business
41%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.118.238.229Hong Kong
AS45753Netsec Limited
114.215.182.140China
AS4134Chinanet
1183.240.98.228China
AS56040China Mobile communications corporation
53--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168922A1B60112A7F633372FCFF65A31D62ACEA53F8572694A1E4C40D51C0EEE492168E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:WKli6zyc7DsLQD2iQal2a5VvVu/jrWWX4:WKdqiYOW8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20588:pIWgLCBKgAwEgB+tiUGgxwM6YgZ0rZxAcRtIEoBBGQhEgABKGWFQBmQYH2iyICLEA5AABBAQxUJJUFFAhAAIaAA+WhGDQI4E

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7c3e7ffffe7ff
Perceptual Hash:b3734e1d4c3a2a33
Difference Hash:330c0f0f0f0e0ca1
Wavelet Hash:00c28383c3ffc3fb
Color Hash:#d2ba2d

Other Hashes

Crop Resistant:330c0f0f0f0e0ca1,0101010d0d010909

Scan History

Scan history not available

Unable to load historical scan data