Security Scan Report: monappenligne.ooguy.com

Redirected to: https://monappenligne.ooguy.com/ant/amendes/embed?url=aHR0cHM6Ly9tb25hcHBlbmxpZ25lLm9vZ3V5LmNvbS9hbnQvYW1lbmRlcy8vY2FjaGUvZGZTQ3dCb1RMclJUT3ZwaD8=

Submitted: Dec 16, 2025, 11:53:14 AMCompleted: Dec 16, 2025, 11:54:00 AMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 2 countries across 4 domains to perform 37 HTTP transactions. The main domain is monappenligne.ooguy.com and was registered NaN years ago.

Submitted URL: https://monappenligne.ooguy.com/ant/amendes/redirect/

Effective URL: https://monappenligne.ooguy.com/ant/amendes/embed?url=aHR0cHM6Ly9tb25hcHBlbmxpZ25lLm9vZ3V5LmNvbS9hbnQvYW1lbmRlcy8vY2FjaGUvZGZTQ3dCb1RMclJUT3ZwaD8=Redirected

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

High‑risk phishing site impersonating a French government service; avoid and report.

Risk Factors
Primary domain matches malicious Indicators of Compromise
Brand impersonation of a government service on a non‑official domain
Dynamic suspicious domain (ooguy.com)
Unranked in Cisco Umbrella top 1M
Redirect chain to a suspicious subdomain
Domain age information unavailable

Details

Page Title

monappenligne.ooguy.com

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

other

(64%)

Domain Information

The domain 'monappenligne.ooguy.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'monappenligne'. Count 5 characters in 'ooguy' holding three vowels versus two consonants. Word splitting yields two words: oo, guy. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://monappenligne.ooguy.com/ant/amendes/redirect/

Page Load Overview

13.88s
Total Load Time
37
HTTP Requests
4
Domains
474 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:19,142 chars
Detector Agreement:50%

Website Classification

Primary Category

other64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

other
64%
legitimate website
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
531.207.38.109France
AS210403Groupe LWS SARL
2104.17.25.14United States
AS13335CLOUDFLARENET
2104.16.174.226United States
AS13335CLOUDFLARENET
2104.17.24.14United States
AS13335CLOUDFLARENET
2104.16.175.226United States
AS13335CLOUDFLARENET
2151.101.130.137San Francisco, California, United States
AS54113FASTLY
22606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
22a04:4e42:600::649United States
AS54113FASTLY
22606:4700::6810:afe2United States
AS13335CLOUDFLARENET
22a04:4e42:200::649United States
AS54113FASTLY
3717--

Detected Technologies1

JQueryv3.6.0
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A048F77329A063986558498F05B43099F20B143F506C9BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+fQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszS2bMy8OldW:thoC9JSqzzbs6o3Sj3gcrsm2eAU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184530:UIaBAPUgwCJIkFNgYDoVwC1UqEERCaJZwAIgQQAKFBQhRIgiIMBFCJSxMJGwJigAaRMMDQEMn6IMUgXKReRFgCj1gCRUOgBa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7d3f3ffffff
Perceptual Hash:a4319bcecc4d3333
Difference Hash:00141c1606000000
Wavelet Hash:fcdcc4c0f0f0f0f0
Color Hash:#2dd243

Other Hashes

Crop Resistant:00141c1606000000

Scan History

Scan history not available

Unable to load historical scan data