ScanMalware.com

Security Scan Report: romper.com

Redirected to:
https://www.romper.com/
Site favicon
Submitted: May 9, 2026, 11:25:38 PMCompleted: May 9, 2026, 11:27:31 PMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 3 countries across 17 domains to perform 41 HTTP transactions. The main domain is romper.com and was registered NaN years ago.

Submitted URL: https://romper.com

Effective URL: https://www.romper.com/Redirected

The Cisco Umbrella rank of the primary domain is #817,666 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Critical IDS alerts suggest the site is compromised and likely distributing malware despite its age and self‑branding; treat as high‑risk and avoid.

Risk Factors
Critical IDS alerts indicating possible malware exfiltration and command‑and‑control
Low domain reputation ranking
Multiple external ad network domains
Domain age information unavailable

Details

Page Title

Romper

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

education learning

(40%)

Domain Information

Within the commercial generic top-level domain (.com), 'romper.com' is registered with no subdomain. Its registrable label 'romper' stretches across 6 characters with 2 vowels and 4 consonants. Splitting it apart reveals 1 word: romper. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://romper.com

Page Load Overview

5.87s
Total Load Time
92
HTTP Requests
30
Domains
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:12,944 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning40% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
40%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1734.160.215.55Kansas City, Missouri, United States
AS396982Google LLC
599.84.152.125United States
AS16509Amazon.com, Inc.
53.160.150.40United States
AS16509Amazon.com, Inc.
513.226.244.109United States
AS16509Amazon.com, Inc.
5142.250.154.154United States
AS15169Google LLC
5142.251.14.97United States
AS15169Google LLC
513.226.244.23United States
AS16509Amazon.com, Inc.
565.8.102.51United States
AS16509Amazon.com, Inc.
5172.67.204.26United States
AS13335Cloudflare, Inc.
5143.204.181.33United States
AS16509Amazon.com, Inc.
9216--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16B745E7F0540703B9B2B56D273B97B4EB112D20ECE434954A2FADA6187C7EF36836468

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:YJwB0RYAseowRe8WmrKBDdfMgCs9pSxhsi7kvLJ:YJwB0RxseVeJmrK3YxhIt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:344227:k5UiRgh4RkVUEyQDkQTZABV8hAABBBFAqAEAXGA6xCMGSKUIQIESLKM6A/CmIWrYJVOAUBw5EiYbVYwQ44iKqLJIAoMKcCEK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c385c5efffff
Perceptual Hash:b165cc8e329acf61
Difference Hash:69861f191d171608
Wavelet Hash:bfc3818181c1c3ff
Color Hash:#6cb7e0

Other Hashes

Crop Resistant:69861f191d171608,32d1f0d0f0706032,8ece0bd98c330200

Scan History

Scan history not available

Unable to load historical scan data