Security Scan Report: direct.start-fxpro.finance

Redirected to:
https://direct.start-fxpro.finance/en/register/de/cysec/6iWT3AuK
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 36 domains to perform 177 HTTP transactions. The main domain is start-fxpro.finance and was registered 2 years 9 months ago.

Submitted URL: https://direct.start-fxpro.finance/en/partner/6iWT3AuK

Effective URL:
https://direct.start-fxpro.finance/en/register/de/cysec/6iWT3AuK
Redirected

AI Security Verdict

Low Risk

Confidence: 84%

3
Risk Score

The site impersonates FxPro, hosts a login form, and is unranked, indicating a high‑risk phishing page.

Risk Factors (4)
Brand impersonation of FxPro
Credential collection via login form
Unranked domain reputation
Suricata medium alert
Safety Factors (1)
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

FxPro Direct - Top-Notch Account Management Toolother network

Scan Type

public

Domain Name Analysis

The domain name 'direct.start-fxpro.finance' uses the .finance top-level domain and includes subdomain 'direct'. The registrable portion 'start-fxpro' spans 11 characters containing two vowels alongside eight consonants; it also includes one hyphen. It segments into 3 words: start, fx, pro. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://direct.start-fxpro.finance/en/partner/6iWT3AuK

Page Load Overview

6.47s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:687 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: webapp
Method: structural

All Detected Categories

corporate
50%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4518.245.86.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
44107.154.192.11Incapsula · WAFUnited States
AS19551Incapsula Inc
44142.251.20.97Google · CDNUnited States
AS15169Google LLC
4499.84.152.52Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1774--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17CD45D4AE504723A6F9313D9B5C96F8D326488919B0188FEFA55C11C13CABF7B22774E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:KhPwjdi3M6gbDoZWdGdlEr3GeHa4nn2JQOB6/1zBWxgNseW9S/XDYqdPOe6DzKmE:KajNDor3eHdo4D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:601503:OYQQANRCiIRgB4gAYASeYZG0SMYIFBSEQ/hQAwEoBIMqUYGiJ4JvYFFGETHVgAwaSSIOBEhZwXYJIAGohDANwB5YAcgMNMdC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:a399cc663399cc66
Difference Hash:0000000808000000
Wavelet Hash:0c0c3c24273f3f3f
Color Hash:#783a65

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data