Domain > www.kla.or.kr

More information on this domain is in AlienVault OTX

Property	Value
Name	korea license association
Email	mekorea@hotmail.com
Address	60-24, Gasan-dong, Geumcheon-gu, Seoul, KR
Zip Code	110034
NameServer	ns2.codns.net
Created	2001-02-05 00:00:00
Changed	2015-03-18 00:00:00
Expires	2020-02-05 00:00:00
Registrar	Inames Co., Ltd.

DNS Resolutions

Date	IP Address
2014-03-27	211.203.179.134 (ClassC)
2024-02-19	59.5.25.239 (ClassC)
2024-05-01	210.223.8.182 (ClassC)
2024-06-30	121.160.52.84 (ClassC)
2025-04-27	121.129.86.3 (ClassC)
2025-08-13	121.128.119.245 (ClassC)

HTTP/1.1 200 OKCache-Control: privateContent-Length: 22545Content-Type: text/htmlExpires: Sun, 03 Dec 2023 10:17:20 GMTServer: Microsoft-IIS/7.0Set-Cookie: ASPSESSIONIDAQTSDSQQKJMLLLACLODMIAIEKIABOHKG

HTML>HEAD>TITLE> :: �ѱ������ڰ���ȸ :: /TITLE>META http-equivContent-Type contenttext/html; charseteuc-kr>LINK href/css/KLA.css typetext/css relstylesheet>SCRIPT languageJAVASCRIPT src/js/login.js>/SCRIPT>SCRIPT languagejavascript>!--function goList(tb){window.open(/notic/user_list.asp?board_no+tb,Board,toolbar0,location0,status0,menubar0,scrollbars1,resizable0,top10,left10,width650,height550)}function goShow(tb,num){window.open(/notic/user_show.asp?board_no+tb+&serial_no+num,Media,toolbar0,location0,status0,menubar0,scrollbars1,resizable0,top10,left10,width650,height550)}-->/SCRIPT>STYLE TYPEtext/css>!--a:link { text-decoration: none;}a:visited { text-decoration: none;}a:active { text-decoration: none;}-->/STYLE>/HEAD>BODY bgcolor#FFFFFF text#000000 leftmargin5 topmargin0 marginwidth5 marginheight0>TABLE width900 border0 cellpadding0 cellspacing0>TR>  TD colspan4>TABLE border0 cellpadding0 cellspacing0 width900 bgcolor#ffffff>  TR>     TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width154 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width97 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width100 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width129 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width101 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width106 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width106 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width98 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>    TD>IMG height1 src/images/spacer.gif width1 border0>/TD>/TR>

Port 443

HTTP/1.1 200 OKCache-Control: privateContent-Length: 22545Content-Type: text/htmlExpires: Sun, 03 Dec 2023 10:17:21 GMTServer: Microsoft-IIS/7.0Set-Cookie: ASPSESSIONIDAQTSDSQQLJMLLLACELHKMMFJEPNDDINA

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
ae31385ec7e1246283e39b0df9d7097b	[HW32.CDB.211f] [Packed.Win32.FakeVMP.1!O] [Trojan.FakeMS.ED] [Suspicious.Cloud.5] [HEUR:Trojan.Win32.StartPage] [Packed/PECompact] [Trojan.Click3.6089] [Cryp_Xin1] [Heuristic.LooksLike.Win32.Suspicious.F] [Mal/EncPk-ABF] [PossibleThreat] [PSW.Banker6.BGKA] [Trojan.Win32.Banker.OW]
4d8dc455f9858ba63d03477af86425a1	[HW32.CDB.776f] [Artemis!4D8DC455F985] [Suspicious.Cloud.5] [Packed/PECompact] [Cryp_Xin1] [Heuristic.LooksLike.Win32.Suspicious.C] [Mal/Behav-160] [TrojanProxy:Win32/Potukorp.A] [PE:Trojan.Friet!1.9DB0] [Win32/Trojan.801]

Domain > www.kla.or.kr

Is this malicious?

Files that talk to www.kla.or.kr

Whois

DNS Resolutions

Port 80

Port 443