Security Scan Report: santander.transit-clients-fr.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Nov 22, 2025, 6:39:17 AMCompleted: Nov 22, 2025, 6:40:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 7 domains to perform 96 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://santander.transit-clients-fr.com/as.php

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Impersonates Le Monde on an unranked domain; high‑risk phishing despite no forms.

Risk Factors
Brand impersonation on an unranked, unrelated domain
Suspicious redirect from non‑trusted domain to a legitimate brand
Unknown / likely new domain registration
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

education learning

(66%)

Domain Information

You're looking at domain 'santander.transit-clients-fr.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'santander'. The registrable portion 'transit-clients-fr' spans 18 characters holding four vowels versus 12 consonants, notching 2 hyphens. Segmentation suggests three words: transit, clients, fr. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://santander.transit-clients-fr.com/as.php

Page Load Overview

0.49s
Total Load Time
96
HTTP Requests
7
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:62,850 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning66% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
66%
corporate business
32%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
86146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
62606:4700:3037::6815:25c1United States
AS13335CLOUDFLARENET
6172.67.157.221United States
AS13335CLOUDFLARENET
618.245.86.69United States
AS16509AMAZON-02
62606:4700:3033::ac43:9dddUnited States
AS13335CLOUDFLARENET
62606:4700:3030::6815:5a95United States
AS13335CLOUDFLARENET
618.245.86.4United States
AS16509AMAZON-02
618.245.86.101United States
AS16509AMAZON-02
6172.67.212.172United States
AS13335CLOUDFLARENET
62606:4700:3034::ac43:d4acUnited States
AS13335CLOUDFLARENET
9614--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B474F8B2B4C06B375183C5CABFA5276AE195440AC6DA8F40F3FD839857CADD5D2831AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:PFpj5rOUOcfBmRLCuDNDc7Ne/vLh1kBROyCfH6sIiwwGg58VhuvwvDYM4/jOqCiH:TVoayqH0H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:346866:jBIACACIDKBkQgAYwhwYEgmgggKAlzHAWggPGSYVpFoCklhjMgBFhNAKDaCE0yCAAtqKCgth+Bg1iBoAFBlAiOCHEIQZciAy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c3c3c3c1c00
Perceptual Hash:99cf30e7328c6399
Difference Hash:0f717171716b319e
Wavelet Hash:e73c3c3c3c3c3e02
Color Hash:#b587c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data