ScanMalware.com

Security Scan Report: www.zahid-official.xyz

Redirected to:
https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7bbe51ec-9147-4d76-9aab-e15da9e4f9daDomain and IP registration (RDAP)/api/v1/rdap/7bbe51ec-9147-4d76-9aab-e15da9e4f9daHow often this domain was scanned/api/v1/domain/stats/zahid-official.xyzScan history for this domain/api/v1/domain/history/zahid-official.xyz?limit=15
This website contacted 4 IPs in 3 countries across 4 domains to perform 40 HTTP transactions. The main domain is zahid-official.xyz and was registered 1 year 1 month ago.

Submitted URL: https://www.zahid-official.xyz

Effective URL:
https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Rendered page is a legitimate GoDaddy domain-sale listing, but the entry domain zahid-official.xyz carries an unverified single-source Formbook (malware) threat-intel match, so treat with caution.

Risk Factors (2)
Content-malware (Formbook) threat-intel match on the primary entry domain (single-source, unverified)
Entry domain resolves/redirects to a parking page — a domain previously flagged for malware distribution is being offered for sale
Safety Factors (5)
Rendered page is GoDaddy's own established parked-domain sale page (forsale.godaddy.com is ranked in Cisco Umbrella top 1M)
No credential or payment form fields present on the judged page
No JavaScript malware (hunting rule), no hunting-rule-scanner hits, no Suricata IDS alerts
No credential exfiltration or cross-origin exfiltration behavior detected
Established domain (10063 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

zahid-official.xyz steht zum Verkauf: jetzt sichern für 209,00 $ | GoDaddy

Scan Type

public

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'www.zahid-official.xyz' is registered, featuring subdomain 'www'. Count 14 characters in 'zahid-official' containing six vowels alongside 7 consonants; it also includes one hyphen. Splitting it apart reveals two words: zahid, official. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.zahid-official.xyz

Page Load Overview

6.65s
Total Load Time
69 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:860 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1013.248.169.48Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10184.30.156.17Akamai · CDNHaarlem, North Holland, Netherlands
AS16625Akamai Technologies, Inc.
102.16.110.27Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
102.16.110.99Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B034C82BE32E8CBECE2537C428957957706B6129CE202759F7D98F3863595F8008BE17

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:77jTmXsx1XoT96/0l3hSdigz/Fd3GzQy+y47gtuFxiDX1G33fiHXFfZCUSxXOXR:nKsx1XoTM0l3hWiOnEDFG0VfZClSR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:242606:QFlE4QmGEJAahQoNQIcrcYBNCyB2FECwHFkiIqZcciJACpKBBGllUQBQWdEoBhAQwoIAh8oxYAGkiEADzCAgBAwUOIAKF8YA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000004fbffffffff
Perceptual Hash:92120bededed9292
Difference Hash:53cccc322432386c
Wavelet Hash:00000400ffffff7f
Color Hash:#784d3a

Other Hashes

Crop Resistant:53cccc322432386c,b676b686a0b98041,23cdcccccccc2c52

Scan History

Scan history not available

Unable to load historical scan data