ScanMalware.com

Security Scan Report: savenexium.xyz

Submitted: Nov 25, 2025, 2:54:07 AMCompleted: Nov 25, 2025, 2:55:13 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 35 HTTP transactions. The main domain is savenexium.xyz and was registered NaN years ago.

Submitted URL: https://savenexium.xyz/

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

Site impersonates WWF on a new, unranked domain; high‑risk phishing.

Risk Factors
Brand impersonation of WWF on an unranked, newly registered domain
Domain age less than 90 days (NEW risk category)
Presence of email collection forms on a suspicious site
Lack of legitimate WWF domain association (official WWF domains are highly ranked)
Domain age information unavailable

Details

Page Title

WWF - Endangered Species Conservation | World Wildlife Fund

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(62%)

Domain Information

Within the open generic top-level domain (.xyz), 'savenexium.xyz' is registered without a subdomain. The registrable portion 'savenexium' spans 10 characters split between 5 vowels and 5 consonants. Segmentation suggests 4 words: save, ne, xi, um. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://savenexium.xyz/

Page Load Overview

0.64s
Total Load Time
35
HTTP Requests
2
Domains
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:10,424 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
62%
government public service
38%
social media network
26%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
34172.67.134.245United States
AS13335CLOUDFLARENET
4104.18.3.107United States
AS13335CLOUDFLARENET
4104.21.25.252United States
AS13335CLOUDFLARENET
42606:4700:3032::6815:19fcUnited States
AS13335CLOUDFLARENET
42606:4700::6812:36bUnited States
AS13335CLOUDFLARENET
42606:4700::6812:26bUnited States
AS13335CLOUDFLARENET
42606:4700:3035::ac43:86f5United States
AS13335CLOUDFLARENET
1104.18.2.107United States
AS13335CLOUDFLARENET
358--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18354429B29F3421D96C3D358AB272A513A60984BBDA79C8CF74C93744F8DBD98C5230D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/LAtlwFdu3NqaHdT+xPSRBJkfZY2se4bYUQoomBX4eI+HEqFFljGS5RkQd:TAtlwFdu3NqaHdT+xPSRBJkfZY2se4bF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:282287:IpGgAiYOQ25AqakooAAFCpCNlxJdDWijECdwAajpbAACE9Gp6ZATVYOSDhoAwQACCCRPEAGAQIQi0ARFFIaYglIRwVIDklQw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001010de3cffff
Perceptual Hash:c868e353f14e8cf4
Difference Hash:8db133b190e8e914
Wavelet Hash:00001010fe7fffff
Color Hash:#2d5086

Other Hashes

Crop Resistant:8a8b1a1b8a8ea6c4,8db133b190e8e914,848b33b33398f8e9

Scan History

Scan history not available

Unable to load historical scan data