ScanMalware.com

Security Scan Report: kualo.com

Redirected to:
https://www.kualo.com/
Site favicon
Submitted: May 12, 2026, 11:28:54 PMCompleted: May 12, 2026, 11:30:37 PMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 15 domains to perform 68 HTTP transactions. The main domain is kualo.com and was registered NaN years ago.

Submitted URL: https://kualo.com

Effective URL: https://www.kualo.com/Redirected

The Cisco Umbrella rank of the primary domain is #799,696 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

The site is old and brand‑consistent but exhibits a critical IDS‑detected C2 beacon and high‑severity traffic, indicating malware distribution risk.

Risk Factors
Critical IDS alert indicating possible command‑and‑control activity
High‑severity IDS alerts for suspicious POST traffic
Obfuscated JavaScript with eval() execution
Cross‑origin network request to internal subdomain
Domain age information unavailable

Details

Page Title

Site Hosting, Domain Registration & Cloud Hosting | Kualo

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(65%)

Domain Information

Within the commercial generic top-level domain (.com), 'kualo.com' is registered without a subdomain. The registrable portion 'kualo' spans 5 characters split between 3 vowels and 2 consonants. Breaking it apart gives two words: ku, alo. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kualo.com

Page Load Overview

5.83s
Total Load Time
214
HTTP Requests
21
Domains
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:32,038 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
65%
documentation technical
43%
blog personal website
38%
education learning
37%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
15142.251.13.95United States
AS15169Google LLC
15104.21.3.238United States
AS13335Cloudflare, Inc.
1550.115.16.30United States
AS53861KGIX
1554.218.247.76Boardman, Oregon, United States
AS16509Amazon.com, Inc.
15142.251.13.97United States
AS15169Google LLC
1554.192.35.14United States
AS16509Amazon.com, Inc.
15104.18.34.214United States
AS13335Cloudflare, Inc.
15192.178.183.94United States
AS15169Google LLC
15104.17.25.14United States
AS13335Cloudflare, Inc.
21414--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16444736384F6923B0A6384C4E9119B597FB2C11BD94255C0BBFE0BE42FD6C5AED0731A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4Obd2sO7018ZMwscxycxDcxPcxpcx7/i5RCOf8v2:4OI701V1qmOV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:263715:VqFklAACWoY4KlGRAINRDAAWAgUCsrRSQAYAsVEoIwAwXDLEyYAosEgID7IyKShGiQRACTQ1aqhCxTlhoKQMIVgiIgAOowAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data