Analysis for

kali.org

Flare Score

Safe

FlareAI™ Summary

Kali.org hosts the Kali Linux distribution, a platform for penetration testing and ethical hacking. The site demonstrates strong security, indicated by a valid SSL certificate from Google and a mature domain age of over 23 years. Blacklist status is unverified. With a FlareScore of 93/100, Kali.org presents a safe risk profile. Users can generally trust the site, but should always practice caution and verify downloads.

+18.5%

than category average

Canada

Server Country

23 years

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Established domain (23+ years old)

Strong email security (SPF, DKIM, DMARC configured)

Good website performance

Active social media presence

Uses CDN for better performance and security

Negative Signals

WHOIS information hidden (privacy protection enabled)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

✓ Valid SSL (40) ✓ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Nov 19, 2025

Valid Until

Feb 18, 2026

29 days remaining

Security Headers

HSTS

X-Frame-Options

Domain & WHOIS Information

Domain Age

23 years 6 months

Registered Jul 20, 2002

Very High Trust

Jul 2002 Expires Jul 2026

Established domain (5+ years) - High trust indicator

Registrar

Gandi SAS

Registration Date

Jul 20, 2002 (23 years ago)

Last Updated

Jun 04, 2025

Expiration Date

Jul 20, 2026 (181 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

+33.170377661

Domain Name: kali.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: http://whois.gandi.net
Registrar URL: http://www.gandi.net
Updated Date: 2025-06-04T11:24:13Z
Creation Date: 2002-07-20T20:54:27Z
Registry Expiry Date: 2026-07-20T20:54:27Z
Registrar: Gandi SAS
Registrar IANA ID: 81
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +33.170377661
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: nash.ns.cloudflare.com
Name Server: nina.ns.cloudflare.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-01-14T15:44:50Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

AAAA

TXT

                                                            aspmx.l.google.com
                                                        

                                                            alt1.aspmx.l.google.com
                                                        

                                                            alt2.aspmx.l.google.com
                                                        

                                                            alt3.aspmx.l.google.com
                                                        

                                                            alt4.aspmx.l.google.com
                                                        

                                                            MS=2F24AAB1EA3933DA8A05BF4B28C70033E0001820
                                                        

                                                            google-site-verification=QO0m_WIzc81XaujadDfsFymI53IwsX4sCt-Tin9ugoI
                                                        

                                                            mjb3j7d41a5qd3i4qo8j8d9q7g
                                                        

                                                            v=spf1 a ip4:208.88.127.98 ip4:52.44.83.41 include:_spf.google.com include:sendgrid.net ~all
                                                        

SPF

HTTP Headers

Key server response headers for security analysis.

Security (6)

HSTS

Referrer Policy

MIME Sniffing Protection

Clickjacking Protection

XSS Filter

Permissions Policy

Web Server

                                            cloudflare
                                        

Cloudflare Ray ID

                                            9bde41c3298afff5-AMS
                                        

CDN Cache

                                            DYNAMIC
                                        

Cache Policy

                                            max-age=600
                                        

{
    "date": "Wed, 14 Jan 2026 15:44:49 GMT",
    "content-type": "text\/html; charset=utf-8",
    "location": "https:\/\/www.kali.org\/",
    "cf-ray": "9bde41c3298afff5-AMS",
    "cf-cache-status": "DYNAMIC",
    "strict-transport-security": "max-age=2592000",
    "expect-ct": "max-age=86400, enforce",
    "referrer-policy": "same-origin",
    "x-content-type-options": "nosniff",
    "x-frame-options": "SAMEORIGIN",
    "x-xss-protection": "1; mode=block",
    "server": "cloudflare",
    "content-encoding": "gzip",
    "cache-control": "max-age=600",
    "expires": "Wed, 14 Jan 2026 15:54:49 UTC",
    "last-modified": "Wed, 14 Jan 2026 08:30:37 GMT",
    "permissions-policy": "interest-cohort=()",
    "vary": "Origin",
    "x-request-id": "01KEYJWNR24177P1ZW2VC7M8N2"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

104.18.4.159

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 a ip4:208.88.127.98 ip4:52.44.83.41 include:_spf.goog...

DKIM

Configured

DMARC

v=DMARC1; p=none; rua=mailto:dc94040db6314366b5d8c16fb40a986...

Performance Metrics

Website loading speed and performance analysis

100

Fast

Load Time

1.04s

Excellent

Page Size

0.05MB

Optimized

Requests

Minimal

Overall

100/100

Performance score

Excellent! This website loads quickly and provides a great user experience.

Blacklist Check

Checking if this domain is listed on major security blacklists.

No blacklist data available yet. Website analysis may be in progress.

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.kali.org

images.kali.org

Privacy & Trackers

0 Trackers Found

Website Screenshot

In-Depth Analysis

Overview

Kali.org is the official website for Kali Linux, a Debian-based distribution geared towards penetration testing and ethical hacking. It serves as a central hub for downloads, documentation, community forums, and information related to the Kali Linux operating system.

Security Assessment

The website exhibits a strong security posture. It utilizes a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication. The domain is 23 years old, indicating established legitimacy. While Google Safe Browsing verification is currently unavailable, the absence of other blacklisting flags is a positive sign. Hosting through Cloudflare further enhances security via DDoS protection and content delivery network (CDN) services.

Trust Level

With a FlareScore of 93/100, kali.org is considered safe to use. This high score reflects the strong security measures in place and the website's long-standing reputation within the cybersecurity community. The presence of a privacy policy also contributes to the trust level.

Recommendations

Users can generally trust kali.org for downloading Kali Linux and accessing related resources. However, it's always advisable to verify the integrity of downloaded ISO images using checksums provided on the site. Due to the nature of Kali Linux, exercise caution when using tools downloaded from the site, ensuring you understand their purpose and potential impact.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.