Security Scan Report: web-fixedfloat.to

Redirected to:
https://ff-io.ink/?click_id=b9c3e4e8-8472-4a55-b45d-f71b2402d3e9
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 83 HTTP transactions. The main domain is web-fixedfloat.to and was registered 3 months ago.

Submitted URL: https://web-fixedfloat.to/

Effective URL:
https://ff-io.ink/?click_id=b9c3e4e8-8472-4a55-b45d-f71b2402d3e9
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake 'Fixed Float' exchange on a 6-day-old domain that redirects to an unrelated host and asks users to deposit crypto to a one-time address; impersonates the real FixedFloat brand. Do not send funds.

Risk Factors (6)
Brand impersonation of FixedFloat on non-official domains (web-fixedfloat.to, ff-io.ink)
Cross-domain redirect to an unrelated second domain immediately on load
Entry domain registered 6 days ago and unranked
Single-source threat-intel report tagging web-fixedfloat.to as phishing
Crypto deposit flow soliciting funds to a one-time address without accounts or KYC
IDS alert for a .to TLD DNS query (weak, informational)
Domain age information unavailable

Details

Page Title

FixedFloat Crypto Exchange | Instant Automated Swaps

Scan Type

public

Domain Name Analysis

You're looking at domain 'web-fixedfloat.to' on the .to country-code top-level domain with no subdomain. The registrable portion 'web-fixedfloat' spans 14 characters containing five vowels alongside 8 consonants; bonus characters include one hyphen. Tokenizing the label suggests three words: web, fixed, float. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://web-fixedfloat.to/

Page Load Overview

2.32s
Total Load Time
723 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,544 chars
Detector Agreement:50%
Language mismatch: Declared as ru but detected as en

Website Classification

Primary Category

cryptocurrency45% confidence
Type: static
Method: structural

All Detected Categories

cryptocurrency
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13104.21.53.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1031.59.120.58Paris, Île-de-France, France
AS56971Cgi Global Limited
1078.46.156.89Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
10142.251.13.95Google · CDNUnited States
AS15169Google LLC
10142.251.127.94Google · CDNUnited States
AS15169Google LLC
10172.67.206.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.110.95Google · CDNUnited States
AS15169Google LLC
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
838--

Detected Technologies3

OpenRestyv1.31.1.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178632138E0F7557E422F75A6E4702F292097D31BA6C863F677BF00A95F8199C5C234A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wSFeoJBRvfQ2V35zB/fFpibCjegMvF70JptprcGwaHQeHandpTK45xx2dDhxU6Hg:DfJBJgoVM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:68624:QKihCJgG1JSooDZqTLEgIABkiAHQECAwYQEGSFDoIIfDkA1UoGAR4WcwJIsQaRAkYwCxHAgwIIBJQxRUHShJEUBt+EhmQEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:67c3e7e7e7e7e7fe
Perceptual Hash:f52a55aad58ad588
Difference Hash:8e0f0e0c1c0c0c02
Wavelet Hash:0080c3c7c7c7c7fe
Color Hash:#d27988

Other Hashes

Crop Resistant:8e0f0e0c1c0c0c02

Scan History

Scan history not available

Unable to load historical scan data