Security Scan: HeadlineLogic News Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d187878b-7b06-45db-9d3f-64f1d16d5140 Domain and IP registration (RDAP)/api/v1/rdap/d187878b-7b06-45db-9d3f-64f1d16d5140How often this domain was scanned/api/v1/domain/stats/rophim.li Scan history for this domain/api/v1/domain/history/rophim.li?limit=15

This website contacted 60 IPs in 5 countries across 52 domains to perform 144 HTTP transactions. The main domain is rophim.li.

Submitted URL: https://www.rophim.li

Effective URL:

https://simcast.com/

Redirected

The Cisco Umbrella rank of the primary domain is #254,213 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

Risk Score

Templated 'HeadlineLogic News Portal' on simcast.com asks for email/password logins and sign-ups while the brand's own domain is flagged as phishing; no payment fields or exfiltration found, but do not enter credentials.

Risk Factors (5)

Credential-collecting login and signup forms (3 password fields) on a templated news page with no legitimate service behind it

Brand displayed ('HeadlineLogic') does not match the serving domain simcast.com

External resource domain headlinelogic.com flagged as phishing (single-source, unverified)

Cross-domain redirect chain (rophim.li → simcast.com, 3 hops) with unknown age/reputation for the final serving domain

Domain-parking monetization footer on a page soliciting account registration

Safety Factors (5)

No payment or card fields present

No credential exfiltration detected — form submissions are same-origin to simcast.com

No JavaScript hunting rule, kit-roster or native-hunting rule malware hits

Content reads as news aggregation (entertainment, weather, sports headlines)

The site's own login form (credentials submit to its own domain; 8694 days old) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 7 to 3

Domain age information unavailable

Details

Page Title

HeadlineLogic News Portal

Scan Type

public

Favicon Hash

MMH3: 908830000

MD5: 5f2f255c93815c244ff6c3b0718b0e6e

Domain Name Analysis

Domain 'www.rophim.li' uses the .li country-code top-level domain, featuring subdomain 'www'. The registrable portion 'rophim' spans 6 characters with two vowels and 4 consonants. Word splitting yields three words: r, op, him. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Entertainment Weather Dini Top Stories Sha? oe > 36 a, yy See the bigger | f BR picture Explore a daily news briefing, ~~ © usa Today Gable Steveson boos and accusations hang over... Find your...

Page Load Overview

0.69s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,090 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism41% confidence

Type: spa

Method: ml+structural

All Detected Categories

news media journalism

41%

entertainment media

30%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	172.238.172.46	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.234.216.100	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.232.7.47	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.234.26.134	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.236.114.191	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	173.239.53.32	Garden City, New York, United States	AS27257Webair Internet Development Company Inc.
2	172.239.53.34	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.236.96.118	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
144	60	-	-