ScanMalware.com

Security Scan Report: www.zahid-official.xyz

Redirected to:
https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/432d157a-340c-47d6-8f9b-64dc4a3d2bafDomain and IP registration (RDAP)/api/v1/rdap/432d157a-340c-47d6-8f9b-64dc4a3d2bafHow often this domain was scanned/api/v1/domain/stats/zahid-official.xyzScan history for this domain/api/v1/domain/history/zahid-official.xyz?limit=15
This website contacted 5 IPs in 3 countries across 4 domains to perform 40 HTTP transactions. The main domain is zahid-official.xyz and was registered 1 year 1 month ago.

Submitted URL: https://www.zahid-official.xyz

Effective URL:
https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Redirect lands on GoDaddy's legitimate domain-for-sale page with no forms, no malware, and no impersonation. Only a single-source unverified 'formbook' tag on the parked entry domain keeps this at moderate risk.

Risk Factors (2)
Single-source, unverified 'formbook' malware report on the entry domain (historical/tainted reputation), not corroborated by any second feed
Entry domain zahid-official.xyz is unranked in Cisco Umbrella and currently parked for sale, consistent with prior abuse use before parking
Safety Factors (5)
Final destination is GoDaddy's established, top-1M-ranked domain-for-sale page (forsale.godaddy.com)
No credential, login, or payment form present (0/0/0/0)
No JavaScript malware (hunting rule) matches and no IDS/Suricata network alerts
No credential exfiltration, no cross-origin form submission, no obfuscated JS
Page displays GoDaddy's own brand for a domain-sale transaction — this is the brand's own site, not impersonation
Domain age information unavailable

Details

Page Title

zahid-official.xyz steht zum Verkauf: jetzt sichern für 209,00 $ | GoDaddy

Scan Type

public

Domain Name Analysis

The domain name 'www.zahid-official.xyz' uses the open generic top-level domain (.xyz) and includes subdomain 'www'. The core label 'zahid-official' covers 14 characters containing 6 vowels alongside 7 consonants, notching 1 hyphen. Word splitting yields 2 words: zahid, official. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

> © GoDaddy Hervorragend 4.5von5 X Tnustpilot Der, Domainname Diese Domain erwerben Jetzt fiir 209,00 $ kaufen und sichern. © Jetzt kaufen USD 209,00 $ Y Kostenloser Transaktionssupport Y Siche...

Page Load Overview

7.14s
Total Load Time
69 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:860 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
876.223.54.146Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
813.248.169.48Italy
AS20940Akamai International B.V.
8184.25.53.16Akamai · CDNMilan, Lombardy, Italy
AS16625Akamai Technologies, Inc.
823.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
823.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
405--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E534D82BE32E8CBECE2537C428957957706B6129CE202759F7D98F3863595F8008BE17

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:77jfmXLx1XoT96/0l3hSdigz/Fd3GzQy+y47gtuFxiJX1G33fiHXFfZCUSxXhXi:jKLx1XoTM0l3hWiOnEJFG0VfZClJi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:242446:BIkFCEP3yQwSlBATAdWRJjSiBodAhRgADeQ6kSVQAgIQgE1eTQAFAFYAgYCwAElBCEQZIAVE1EkAGxCtrJYbNEkABAKoRe9w

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000004fbffffffff
Perceptual Hash:92120bededed9292
Difference Hash:53cccc322432386c
Wavelet Hash:00000400ffffff7f
Color Hash:N/A

Other Hashes

Crop Resistant:53cccc322432386c,b676b686a0b98041,23cdcccccccc2c52

Scan History

Scan history not available

Unable to load historical scan data