ScanMalware.com

Security Scan Report: saved.exp.xvp.eu-1.xcal.tv

Redirected to:
https://xerxes-ent-eu-prod.xerxes.comcast.com/xerxes-sp/protected/auth...
Submitted: Apr 2, 2026, 3:14:49 PMCompleted: Apr 2, 2026, 3:16:36 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 7 HTTP transactions. The main domain is xerxes-ent-eu-prod.xerxes.comcast.com and was registered NaN years ago.

Submitted URL: https://saved.exp.xvp.eu-1.xcal.tv

Effective URL: https://xerxes-ent-eu-prod.xerxes.comcast.com/xerxes-sp/protected/auth?response_type=code&client_id=xvp&state=PuoaavQpdmKBc3u8XCyRDXyc2_DYmdSrcORVoRLteDU%3D&continue=https://saved.exp.xvp.eu-1.xcal.tv/login/oauth2/code/xerxes-ent-eu-prod.xerxes.comcast.comRedirected

The Cisco Umbrella rank of the primary domain is #19,614 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

Low risk; email collection via cross‑origin form but no malicious indicators detected.

Risk Factors
Cross‑origin email form submission to external domain
Safety Factors
Well‑established domain with long registration history
Cisco Umbrella ranking within top 20 000
No password fields present
Low JavaScript obfuscation score (standard minification)
No malicious Indicators of Compromise or IDS alerts
Domain age information unavailable

Details

Page Title

Xerxes

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'saved.exp.xvp.eu-1.xcal.tv' uses the .tv country-code top-level domain with subdomain 'saved.exp.xvp.eu-1'. The core label 'xcal' covers 4 characters split between one vowel and 3 consonants. Word splitting yields two words: x, cal. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://saved.exp.xvp.eu-1.xcal.tv

Page Load Overview

1.24s
Total Load Time
7
HTTP Requests
2
Domains
168 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:25 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4184.120.4.25United States
AS212465Comcast International Holdings UK Limited
3184.120.80.155United States
AS212465Comcast International Holdings UK Limited
72--

Detected Technologies2

HSTS
40%
Envoy
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EA512460D4F45C636902C368BEC0AD196DCD90178B1924CC3BEC8A7EAFD7C02672375A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR0yRcgqDLdsFwxi63ikfd3H/Wy34+XS0IdtJ/iH9Xm+Y52Ej6qwaHDSieVY:TZCLdCwomd3H/X3xXod66UE9Se

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2648:AAAJKgAQgBAAEAUAGAAARAMAgQAQAAACJCAAAAkQACCIIAgYJAAAAAAAiPBEAAYAAAQABAggkAAAEEQAIAA0AgAKACAAIIgO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b38ccc3399c66699
Difference Hash:08000c080c4d000c
Wavelet Hash:0c0c040424243c3c
Color Hash:#863d2d

Other Hashes

Crop Resistant:08000c080c4d000c,b2f1e8b2f8b1b7b6

Scan History

Scan history not available

Unable to load historical scan data