ScanMalware.com

Security Scan Report: www.zahid-official.xyz

Redirected to:
https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Site favicon
Submitted: Sep 20, 2026, 11:47:34 AMCompleted: Sep 20, 2026, 11:48:01 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9f5bbadf-4700-42ff-b5f2-75da38741ae8Domain and IP registration (RDAP)/api/v1/rdap/9f5bbadf-4700-42ff-b5f2-75da38741ae8Certificate Transparency/api/v1/ct/forsale.godaddy.comHow often this domain was scanned/api/v1/domain/stats/zahid-official.xyzScan history for this domain/api/v1/domain/history/zahid-official.xyz?limit=15

This website contacted 5 IPs in 2 countries across 4 domains to perform 40 HTTP transactions. The main domain is forsale.godaddy.com and was registered 18 years ago.

Submitted URL: https://www.zahid-official.xyz

Effective URL:

https://forsale.godaddy.com/forsale/zahid-official.xyz?utm_source=TDFS...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Rendered page is a legitimate GoDaddy domain-sale listing, but the entry domain zahid-official.xyz carries an unverified single-source Formbook (malware) threat-intel match, so treat with caution.

Risk Factors
Content-malware (Formbook) threat-intel match on the primary entry domain (single-source, unverified)
Entry domain resolves/redirects to a parking page — a domain previously flagged for malware distribution is being offered for sale
Safety Factors
Rendered page is GoDaddy's own established parked-domain sale page (forsale.godaddy.com is ranked in Cisco Umbrella top 1M)
No credential or payment form fields present on the judged page
No JavaScript malware (YARA), no YARA-scanner hits, no Suricata IDS alerts
No credential exfiltration or cross-origin exfiltration behavior detected
Established domain (10063 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

zahid-official.xyz steht zum Verkauf: jetzt sichern für 209,00 $ | GoDaddy

Scan Type

public

Domain Name Analysis

Domain 'www.zahid-official.xyz' uses the open generic top-level domain (.xyz); it also runs on subdomain 'www'. Count 14 characters in 'zahid-official' with six vowels and seven consonants, along with 1 hyphen. Word splitting yields 2 words: zahid, official. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.zahid-official.xyz

Page Load Overview

7.54s
Total Load Time
69 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:860 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
813.248.169.48Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
876.223.54.146Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
823.37.193.12Akamai · CDNBerlin, State of Berlin, Germany
AS16625Akamai Technologies, Inc.
823.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
823.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
405--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F34C82BE32E8CBECE2537C428957957706B6129CE202759F7D98F3863595F8008BE17

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:77jTmX+x1XoT96/0l3hSdigz/Fd3GzQy+y47gtuFxiPX1G33fiHXFfZCUSxXUX3:nK+x1XoTM0l3hWiOnEPFG0VfZClg3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:242576:AJQFsgQABQikmhgegEBi0QSCGvBAZDMk0AlAmBmRIHFU2AkgCIhDiIYGUUF2BGABIwgCyAJosCQ2CyUBABlQTDE1PAAMVqIJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000004fbffffffff
Perceptual Hash:92120bededed9292
Difference Hash:53cccc322432386c
Wavelet Hash:00000400ffffff7f
Color Hash:#ced279

Other Hashes

Crop Resistant:53cccc322432386c,b676b686a0b98041,23cdcccccccc2c52

Scan History

Scan history not available

Unable to load historical scan data