ScanMalware.com

Security Scan Report: mougin.transit-clients-fr.com

Redirected to: https://www.lemonde.fr/

Submitted: Nov 21, 2025, 11:08:47 AMCompleted: Nov 21, 2025, 11:11:14 AMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 7 domains to perform 97 HTTP transactions. The main domain is lemonde.fr.

Submitted URL: https://mougin.transit-clients-fr.com/

Effective URL: https://www.lemonde.fr/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High‑risk phishing page impersonating Le Monde on a suspicious, unranked domain

Risk Factors
Brand impersonation (Le Monde) on a low‑reputation, likely newly registered domain
Unranked domain (not in Cisco Umbrella top 1M) used to host phishing‑style content
Garbled OCR text suggests social‑engineering tactics to lure users
Domain age information unavailable

Details

Page Title

Le Monde in English – World news, culture and opinion

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

corporate business

(70%)

Domain Information

Domain 'mougin.transit-clients-fr.com' uses the commercial generic top-level domain (.com) with subdomain 'mougin'. Its registrable label 'transit-clients-fr' stretches across 18 characters holding 4 vowels versus twelve consonants, along with 2 hyphens. Word splitting yields three words: transit, clients, fr. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mougin.transit-clients-fr.com/

Page Load Overview

0.59s
Total Load Time
97
HTTP Requests
7
Domains
1.8 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:61,337 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business70% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
70%
news media journalism
70%
documentation technical
27%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
87146.75.122.217Frankfurt am Main, Hesse, Germany
AS54113FASTLY
623.35.229.251Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
618.245.86.69United States
AS16509AMAZON-02
6172.67.212.172United States
AS13335CLOUDFLARENET
62606:4700:3033::ac43:9dddUnited States
AS13335CLOUDFLARENET
62606:4700:3030::6815:5a95United States
AS13335CLOUDFLARENET
62606:4700:3037::6815:25c1United States
AS13335CLOUDFLARENET
618.245.86.4United States
AS16509AMAZON-02
618.245.86.111United States
AS16509AMAZON-02
62606:4700:3034::ac43:d4acUnited States
AS13335CLOUDFLARENET
9715--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B543A7275942F3A519384EABFE1376896115816C3C64E52FBA7AB9C87CBDC143A330C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:FIB4l49Schlzij5rOUOcfBmRLCuDNDc7Ne/vLh1kBROyCfH6sIiwwGg58VhuvwvY:69SchlzGay90

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:298784:QWALnn0IAUBQGWhEAmBHMHBMAghmAN2wYEQBXAGTmvACuoGDEwJBJCIMYAlIAiCaGQARQGWDQEJAUCzj0QOAohaAYITEpmhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c1c1c1c00
Perceptual Hash:98c3633c673636c9
Difference Hash:0f7171713339290c
Wavelet Hash:e7bd3c3c3c1c1e02
Color Hash:#c5b187

Other Hashes

Crop Resistant:622a8a2ab2a23327,0f7171713339290c

Scan History

Scan history not available

Unable to load historical scan data