ScanMalware.com

Security Scan Report: santander.transit-clients-fr.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Nov 23, 2025, 3:13:48 AMCompleted: Nov 23, 2025, 3:15:01 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 8 domains to perform 93 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://santander.transit-clients-fr.com/

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

4
Risk Score

Untrusted domain redirects to Le Monde; no credential collection but brand impersonation present.

Risk Factors
Brand impersonation/typosquatting on an unranked domain
Suspicious redirect from a non‑official domain to a legitimate site
Safety Factors
Final destination (www.lemonde.fr) is a legitimate, reputable news website
No credential or payment forms detected
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

news media journalism

(57%)

Domain Information

Domain 'santander.transit-clients-fr.com' uses the commercial generic top-level domain (.com), featuring subdomain 'santander'. The second-level label 'transit-clients-fr' is 18 characters long split between 4 vowels and 12 consonants, along with 2 hyphens. It segments into three words: transit, clients, fr. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://santander.transit-clients-fr.com/

Page Load Overview

0.58s
Total Load Time
93
HTTP Requests
8
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:62,763 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism57% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
57%
corporate business
49%
entertainment media
32%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
83146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
62606:4700:3030::6815:5a95United States
AS13335CLOUDFLARENET
6172.67.157.221United States
AS13335CLOUDFLARENET
62606:4700:3034::ac43:d4acUnited States
AS13335CLOUDFLARENET
618.245.86.101United States
AS16509AMAZON-02
62606:4700:3033::ac43:9dddUnited States
AS13335CLOUDFLARENET
618.245.86.4United States
AS16509AMAZON-02
62606:4700:3037::6815:25c1United States
AS13335CLOUDFLARENET
618.245.86.111United States
AS16509AMAZON-02
6172.67.212.172United States
AS13335CLOUDFLARENET
9314--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE74F8B1B5C06B37518385CABFA53B6AF191440AC6DA8E40F3FD83945BCADD5D2831AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:jFpj5rOUOcfBmRLCuDNDc7Ne/vLh1kBROyCfH6sIiwwGg58VhuvwvDYM4/jOqCix:ubtNJayqH0H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:347104:IBhkINBWYEEBI2koowAoAtCPJIEZEwAIIwCNBuxKIDCBMJy5AAcixTq5ZJBAhECwAwxuJAAVhEwwikGAqWCqEAQyUkUBUkCg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c3c3c3c1c00
Perceptual Hash:99cf30e731946399
Difference Hash:0f717171736b319e
Wavelet Hash:e73c3c3c3c3c3e02
Color Hash:#9ad279

Other Hashes

Crop Resistant:a262a292862a2b8c,0f717171736b319e

Scan History

Scan history not available

Unable to load historical scan data