Domain > totaledu.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	zocbo1004@zocbo.com
NameServer	NS11.WHOIS.CO.KR
Created	2002-08-24 00:00:00
Changed	2016-06-23 00:00:00
Expires	2018-08-24 00:00:00
Registrar	WHOISNETWORKS CO., L

DNS Resolutions

Date	IP Address
2024-06-08	199.59.243.225 (ClassC)
2024-11-04	3.220.3.111 (ClassC)
2024-12-17	199.59.243.227 (ClassC)
2025-10-22	199.59.243.228 (ClassC)
2025-12-09	44.208.83.180 (ClassC)

HTTP/1.1 200 OKdate: Tue, 02 Apr 2024 11:46:34 GMTcontent-type: text/html; charsetutf-8content-length: 1038x-request-id: f1be2afe-c00f-496c-93b8-8ff60b04f271cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_SUXoFjsiIqj1958q0fbREE49ntrX3ATCuIkn/ZDqB9K4dzblywuEncCG3KyKT2bmQt9UurGsgSxeMizuXRUepA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiZjFiZTJhZmUtYzAwZi00OTZjLTkzYjgtOGZmNjBiMDRmMjcxIiwicGFnZV90aW1lIjoxNzEyMDU4Mzk1LCJwYWdlX3VybCI6Imh0dHA6Ly90b3RhbGVkdS5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoidG90YWxlZHUuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bCJhHOQOF.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 02 Apr 2024 11:46:35 GMTContent-Type: text/html; charsetutf-8Content-Length: 1042X-Request-Id: 7bc50e7f-0aab-4800-a632-8b3698a76e3aCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_SUXoFjsiIqj1958q0fbREE49ntrX3ATCuIkn/ZDqB9K4dzblywuEncCG3KyKT2bmQt9UurGsgSxeMizuXRUepA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiN2JjNTBlN2YtMGFhYi00ODAwLWE2MzItOGIzNjk4YTc2ZTNhIiwicGFnZV90aW1lIjoxNzEyMDU4Mzk1LCJwYWdlX3VybCI6Imh0dHBzOi8vdG90YWxlZHUuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6InRvdGFsZWR1LmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bDroTIpqR.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > totaledu.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443