ScanMalware.com

Security Scan Report: lorentz.planning-locker.com

Redirected to: https://www.lemonde.fr/

Site favicon
Submitted: Dec 10, 2025, 7:49:24 PMCompleted: Dec 10, 2025, 7:50:26 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 7 domains to perform 104 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://lorentz.planning-locker.com/as.php

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High‑risk phishing page masquerading as Le Monde using a suspicious redirect domain.

Risk Factors
Brand impersonation on a non‑official domain
Unranked and likely newly registered domain
Suspicious redirect chain (initial domain → le monde)
Potential social‑engineering prompt to accept data usage
Domain age information unavailable

Details

Page Title

Le Monde.fr - Actualités et Infos en France et dans le monde

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

healthcare medical

(81%)

Domain Information

You're looking at domain 'lorentz.planning-locker.com' on the commercial generic top-level domain (.com), featuring subdomain 'lorentz'. Its registrable label 'planning-locker' stretches across 15 characters containing four vowels alongside ten consonants, along with 1 hyphen. Splitting it apart reveals 2 words: planning, locker. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lorentz.planning-locker.com/as.php

Page Load Overview

6.03s
Total Load Time
104
HTTP Requests
7
Domains
1.9 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:61,583 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical81% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
81%
news media journalism
64%
corporate business
35%
government public service
34%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
623.52.181.51Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
6146.75.118.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
6104.21.37.193United States
AS13335CLOUDFLARENET
618.245.86.4United States
AS16509AMAZON-02
6104.21.59.161United States
AS13335CLOUDFLARENET
6172.67.212.172United States
AS13335CLOUDFLARENET
62606:4700:3033::6815:3ba1United States
AS13335CLOUDFLARENET
62606:4700:3037::ac43:b4e9United States
AS13335CLOUDFLARENET
62606:4700:3034::ac43:d4acUnited States
AS13335CLOUDFLARENET
10415--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13354E8B1B0C16F3741C386CABFA527AAE1D1980AC9D64E50F3FD938917C9DE4D28259C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:fgFvMM+tR2dMqlADCrT1Mgj7LNbcQXQqQbbEQy9WPUw7P9Z6E05IxhPD9WP/U/:8vMMhlxy6E05AF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:282393:WGCAIwrBzQcDEKhRIzzIgRClKNECqQhC6ECQQDGUBAeBC6AkdUr5QDBMICgoAHgJMgBcEYTYgjHBBQcco5mNBqIQg0cYFgIh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00183c3c3c3c1c00
Perceptual Hash:99cf30e7329c6718
Difference Hash:0f717171716b319e
Wavelet Hash:e73c3c3c3c3c3e02
Color Hash:#931f46

Other Hashes

Crop Resistant:a262a292862a2b8c,0f717171716b319e

Scan History

Scan history not available

Unable to load historical scan data