The scan of hkalc.com on 20 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with hkalc.com?

4 analysed samples communicate with this URL, including Phishing.

How was hkalc.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

hkalc.com - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned hkalc.com and returned a unknown verdict (score 6). The page resolved to 202.181.163.150 on IXTECH NETWORK LIMITED in HK. The domain was registered 4168 days ago through Network Solutions, LLC. 2 domains and 1 IP were contacted. 4 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://hkalc.com/userfiles/domobix.pdf
Domain: hkalc.com · IP: 202.181.163.150 · AS7540 · HK
Server: Apache
Page title: ERROR 403 - Forbidden!
HTTP status: 403 · text/html; charset=UTF-8
Registrar: Network Solutions, LLC · domain age 4168 days · created 2015-03-23
Scan tier: standard · observed 2026-08-20 08:45:33 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from hkalc.com. Each links to its full analysis.

Phishing - referenced · b7e06925a48d968bed432f4a906a6247 · first seen 2026-08-16
Phishing - referenced · b783359bb51e49a3a289362e98870d25 · first seen 2026-08-15
Phishing - referenced · 7b18d693163c47b792e7447eec8cfde2 · first seen 2026-08-14
Phishing - referenced · daef58479495ed08291f5c55b263eb06 · first seen 2026-08-12

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Apache

Contacted infrastructure

202.181.163.150 - AS7540 IXTECH NETWORK LIMITED (Hong Kong)

Observed indicators

hkalc.com
www.ispconfig.org
202.181.163.150
http://hkalc.com/userfiles/domobix.pdf
https://www.ispconfig.org/

Other scans of hkalc.com (7)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - unknown
16 Aug 2026 - unknown · http://hkalc.com/userfiles/zezuvibarofozub.pdf
16 Aug 2026 - unknown · http://hkalc.com/userfiles/zezuvibarofozub.pdf
16 Aug 2026 - unknown · http://hkalc.com/userfiles/zezuvibarofozub.pdf
14 Aug 2026 - unknown · http://hkalc.com/userfiles/koxetako.pdf
14 Aug 2026 - unknown · http://hkalc.com/userfiles/koxetako.pdf
14 Aug 2026 - unknown · http://hkalc.com/userfiles/koxetako.pdf

Questions about hkalc.com

Is hkalc.com safe?: The scan of hkalc.com on 20 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with hkalc.com?: 4 analysed samples communicate with this URL, including Phishing.
How was hkalc.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of hkalc.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan