ScanMalware.com

Security Scan Report: niquetmorts.planning-locker.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Dec 10, 2025, 8:02:39 PMCompleted: Dec 10, 2025, 8:04:09 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 7 domains to perform 103 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://niquetmorts.planning-locker.com/as.php

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Suspicious brand‑impersonating redirect; likely phishing

Risk Factors
Brand impersonation on an unusual, unranked domain
New or unknown domain age
Suspicious redirect from a non‑trusted domain
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

news media journalism

(30%)

Domain Information

The domain 'niquetmorts.planning-locker.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'niquetmorts'. Its registrable label 'planning-locker' stretches across 15 characters holding four vowels versus 10 consonants, notching 1 hyphen. Segmentation suggests two words: planning, locker. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://niquetmorts.planning-locker.com/as.php

Page Load Overview

50.66s
Total Load Time
103
HTTP Requests
7
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:61,725 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism30% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
30%
healthcare medical
27%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
688.221.169.246Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
6146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
6104.21.59.161United States
AS13335CLOUDFLARENET
6146.75.118.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
6104.21.37.193United States
AS13335CLOUDFLARENET
6172.67.212.172United States
AS13335CLOUDFLARENET
618.245.86.69United States
AS16509AMAZON-02
62606:4700:3033::6815:3ba1United States
AS13335CLOUDFLARENET
618.245.86.111United States
AS16509AMAZON-02
62606:4700:3037::ac43:b4e9United States
AS13335CLOUDFLARENET
10315--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A454D7B1B0C16F3701C386CABFA527AEE191980AC9D64E51F3FD938917C9DE4D28259C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:U0BvMMEpXMUlOuwDW3MpbcQXQqQbbEQy9WPUw7P9Z6E05IxhPD9WP/U/:PvMMgVH6E05AF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:287886:JGp0UBAAWRXAMQTiYwKaKgBCOkwBBCoXIYTBGgAMFSCahBBSFCMARhBcQgZOBQkEwtLEERCECkj0avCAILIbiGcIQFeANNUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c3c3c3c1c00
Perceptual Hash:99cf30e7329c6718
Difference Hash:0f717171716b319c
Wavelet Hash:e73c3c3c3c3c3e02
Color Hash:#87adc5

Other Hashes

Crop Resistant:a262a292862a2b8c,0f717171716b319c

Scan History

Scan history not available

Unable to load historical scan data