Security Scan: Xerxes

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f062eeab-e825-4ea5-8f68-8e653de184dc Domain and IP registration (RDAP)/api/v1/rdap/f062eeab-e825-4ea5-8f68-8e653de184dc Certificate Transparency/api/v1/ct/ent.passportsecure.net How often this domain was scanned/api/v1/domain/stats/session.exp.xvp.na-1.xcal.tv Scan history for this domain/api/v1/domain/history/session.exp.xvp.na-1.xcal.tv?limit=15

This website contacted 5 IPs in 1 country across 2 domains to perform 7 HTTP transactions. The main domain is ent.passportsecure.net and was registered 17 years ago.

Submitted URL: https://session.exp.xvp.na-1.xcal.tv

Effective URL:

https://ent.passportsecure.net/xerxes-sp/protected/auth?response_type=...

Redirected

The Cisco Umbrella rank of the primary domain is #19,614 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Generic 'Xerxes/PASSPORT' sign-in on an unknown-age domain collecting an email via a standard PKCE OAuth redirect. No password/payment fields, no impersonation, no threat-intel or YARA hits — no concrete malicious signal, so capped at moderate risk pending verification of the operator.

Risk Factors (2)

Credential-adjacent (email) collection on a domain with unknown age and no verifiable ownership information

Generic 'passportsecure' / 'Xerxes' naming with no about, legal or contact pages to establish the operating entity

Safety Factors (4)

OAuth 2.0 authorization-code flow with PKCE and state/nonce parameters — standard, non-exfiltrating SSO construction

No password, card or CVV field anywhere in the captured DOM

No cross-origin JavaScript network targets and no credential exfiltration detected

Zero Indicators of Compromise, YARA, IDS or Safe Browsing matches against the page or its resources

Domain age information unavailable

Details

Page Title

Xerxes

Scan Type

public

Favicon Hash

MMH3: 1639451163

MD5: c5a9a0c0d17bf6fd3ca475efcabad43d

Domain Name Analysis

The domain 'session.exp.xvp.na-1.xcal.tv' uses the .tv country-code top-level domain, featuring subdomain 'session.exp.xvp.na-1'. Its registrable label 'xcal' stretches across 4 characters split between 1 vowel and 3 consonants. Segmentation suggests 2 words: x, cal. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.44s

Total Load Time

169 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:25 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	96.106.82.13	United States	AS7922Comcast Cable Communications, LLC
1	96.102.242.159	United States	AS7922Comcast Cable Communications, LLC
1	96.103.168.187	United States	AS7922Comcast Cable Communications, LLC
1	96.103.168.44	United States	AS7922Comcast Cable Communications, LLC
1	96.106.82.30	United States	AS7922Comcast Cable Communications, LLC
7	5	-	-