ScanMalware.com

Security Scan Report: ducon.clientspickup-sms.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Dec 9, 2025, 4:09:24 PMCompleted: Dec 9, 2025, 4:11:12 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 7 domains to perform 73 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://ducon.clientspickup-sms.com/as.php

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing scam using Le Monde branding on a newly created unranked domain.

Risk Factors
Brand impersonation on unusual domain
Very new (unregistered) domain
Unranked in Cisco Umbrella top 1M
Suspicious redirect from non‑whitelisted domain
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

news media journalism

(40%)

Domain Information

Domain 'ducon.clientspickup-sms.com' uses the commercial generic top-level domain (.com) with subdomain 'ducon'. The second-level label 'clientspickup-sms' is 17 characters long holding 4 vowels versus twelve consonants; it also includes one hyphen. Word splitting yields three words: clients, pickup, sms. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ducon.clientspickup-sms.com/as.php

Page Load Overview

73.55s
Total Load Time
73
HTTP Requests
7
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:48,785 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism40% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
40%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1718.245.86.69United States
AS16509AMAZON-02
4104.21.37.193United States
AS13335CLOUDFLARENET
4146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
4104.21.25.132United States
AS13335CLOUDFLARENET
4146.75.118.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
423.52.181.51Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
4172.67.212.172United States
AS13335CLOUDFLARENET
4172.67.134.66United States
AS13335CLOUDFLARENET
418.245.86.101United States
AS16509AMAZON-02
42606:4700:3036::ac43:8642United States
AS13335CLOUDFLARENET
7315--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC943A71B5D02B3A518380EAFFA1776995158826C3DA8A41F7FF97484BCBDC8938325C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:NFmG9Szbo/Jj5rOUOcfBmRLCuDNDc7Ne/vLh1kBROyCfH6sIiwwGg58VhuvwvDYj:Z9Szb6c9ay+H0p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:446281:gPQAWFgOgHwgiAxRBBCBkicBw4wOEAG4cGCGoiEkamhAXURGeDgEGLqsQCQGoKWGTSRUIWiTBhZBBICQFAG6UAARigQAACDD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c3c3c3c1c00
Perceptual Hash:99cf30e732986719
Difference Hash:0f717171716b318c
Wavelet Hash:e73c3c3c3c3c3e02
Color Hash:#bf405b

Other Hashes

Crop Resistant:a262a292862a2b8c,0f717171716b318c

Scan History

Scan history not available

Unable to load historical scan data