Security Scan Report: kivarotools.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 139 HTTP transactions. The main domain is kivarotools.com and was registered 1 week ago.

Submitted URL: http://kivarotools.com/document/pdf-merge-split

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Self-branded, form-free PDF utility on a new unranked domain. No forms, no threat-intel, YARA or IDS hits and no impersonation; content reads like a genuine tool site, so only domain youth warrants mild caution.

Risk Factors (2)
Domain is 8 days old (VERY_NEW) and unranked in Cisco Umbrella — a weak prior, not evidence of wrongdoing
Claims of 'zero upload / 100% client-side processing' are unverifiable from static scan data alone
Safety Factors (5)
Self-branded site whose name matches its own domain
No credential, login or payment forms on the page
No threat-intelligence, YARA, JS-behavioral or network IDS findings
Detailed, coherent technical documentation consistent with a real utility product
No hidden or disguised password fields, no obfuscated JavaScript with a network sink
Domain age information unavailable

Details

Page Title

PDF Merge & Split Tool — Combine 50 PDFs (750 MB), Extract Pages & ZIP (Zero Upload) | KivaroTools

Scan Type

public

Domain Name Analysis

You're looking at domain 'kivarotools.com' on the commercial generic top-level domain (.com) and has no subdomain. The core label 'kivarotools' covers 11 characters holding 5 vowels versus 6 consonants. Word splitting yields 3 words: kiva, ro, tools. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://kivarotools.com/document/pdf-merge-split

Page Load Overview

2.89s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:22,127 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical88% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
88%
technology software
49%
government public service
45%
blog personal website
36%
adult content
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37104.21.55.185Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
34172.64.148.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
34172.67.172.31Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
34104.18.39.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1394--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19D24C5357160C96EA88B5B55F07EAE34204D978AD743DAB8E19CC9304E89C78DBDF6C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ZQrGeud+iD6CML3yHamtUa0fJMqrQm0exwbscYuIdJsf5glFMDMA:iXHi9MLCRtU/4ExJuIvINDMA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:224744:PYgEKAm4DxCLiBk0Cgk0wNg2BAEgEnY0RCBmICOEVyIDgQjEEZ81hrECoxiBAFikAxUAIgYhQf4AAwAScA4tEjEzKAAaYAG5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfc3c3ffffe7ffef
Perceptual Hash:b336379e8c8c8e8c
Difference Hash:688e8e224c4c101c
Wavelet Hash:8643c383ada53f07
Color Hash:#87a7c5

Other Hashes

Crop Resistant:688e8e224c4c101c

Scan History

Scan history not available

Unable to load historical scan data