ScanMalware.com

Security Scan Report: exped-mrelay-mobile.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Oct 15, 2025, 10:06:24 PMCompleted: Oct 15, 2025, 10:07:23 PMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 3 countries across 7 domains to perform 64 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://exped-mrelay-mobile.com/

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Site impersonates Le Monde on a new, unranked domain; classified as a confirmed phishing scam.

Risk Factors
Brand impersonation on a newly registered, unranked domain
Domain age unknown/likely very new
Use of a non‑whitelisted redirect to a legitimate site to mask the malicious source
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(100% confidence)

Category

corporate business

(94%)

Domain Information

Domain 'exped-mrelay-mobile.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'exped-mrelay-mobile' covers 19 characters containing 7 vowels alongside ten consonants, along with 2 hyphens. It segments into five words: exp, ed, m, relay, mobile. The median word length lands at 3 characters. Most frequently, 'expo' shows up in English. Usage also turns up in Italian and Indonesian contexts.

Screenshot

Security scan screenshot of https://exped-mrelay-mobile.com/

Page Load Overview

18.18s
Total Load Time
64
HTTP Requests
7
Domains
1.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:100%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:50,424 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business94% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
94%
news media journalism
80%
government public service
60%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.79.89.214Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
5104.21.37.193United States
AS13335CLOUDFLARENET
5172.67.212.172United States
AS13335CLOUDFLARENET
518.245.86.111United States
AS16509AMAZON-02
5223.29.226.200Pakistan
AS213441Slayer Group Limited
5146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
518.245.86.4United States
AS16509AMAZON-02
518.245.86.69United States
AS16509AMAZON-02
518.245.86.101United States
AS16509AMAZON-02
52606:4700:3034::ac43:d4acUnited States
AS13335CLOUDFLARENET
6411--

Detected Technologies3

X-UA-Compatible
100%
Open-Graph-Protocolvwebsite
100%
Outbrain
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T166A44A71B5C02B3B51C380EABFA1376995258816C3CA8A51F7FF97984BCBDC5928325C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:RFxB9Szb5/Jj5rOUOcfBmRLCuDNDc7Ne/vLh1kBROyCfH6sIiwwGg58VhuvwvDY8:v9SzbGGwdb1NHlo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:456606:RiJUEQvLBBQgJgE0gAokQwQYRkMAgyloywNEoFFgONsASJ3gJ3QUYBBGakLCBxEkBAcugyNoHB3GAAsXlAkgQMYCSAgXysQI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001c3c3c3c381c00
Perceptual Hash:99cf30e733cc6318
Difference Hash:0f717171716b339e
Wavelet Hash:e73c3c3c7c3c3c02
Color Hash:#6ce081

Other Hashes

Crop Resistant:a262a292862a2b8c,0f717171716b339e

Scan History

Scan history not available

Unable to load historical scan data