Domain > login.staging.eks.romcore.cloud

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-13	34.255.167.162 (ClassC)
2025-05-26	52.211.27.189 (ClassC)
2025-08-13	34.247.123.186 (ClassC)
2025-08-21	54.77.204.158 (ClassC)
2025-09-01	52.210.81.250 (ClassC)
2026-01-13	54.171.13.98 (ClassC)
2026-02-14	52.48.240.248 (ClassC)

HTTP/1.1 403 ForbiddenDate: Thu, 13 Mar 2025 12:21:00 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-ag

!DOCTYPE html>html langen charsetutf-8>  head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno>    title>Sign In/title>    link relstylesheet href/oauth2/static/css/bulma.min.css>    style>      body {        height: 100vh;      }      .sign-in-box {        max-width: 400px;        margin: 1.25rem auto;      }      .logo-box {        margin: 1.5rem 3rem;      }      .alert {        padding: 5px;        background-color: #f44336;          color: white;        margin-bottom: 5px;        border-radius: 5px      }             .closebtn {        margin-left: 10px;        color: white;        font-weight: bold;        float: right;        font-size: 22px;        line-height: 20px;        cursor: pointer;        transition: 0.3s;      }             .closebtn:hover {        color: black;      }      footer a {        text-decoration: underline;      }    /style>  /head>  body classhas-background-light>  section classsection has-background-light>    div classbox block sign-in-box has-text-centered>            div classblock logo-box>        svg idLayer_1 data-nameLayer 1 xmlnshttp://www.w3.org/2000/svg viewBox0 0 840.55645 412.45904>defs>style>.cls-1{fill:#333;}.cls-2{fill:#7c7c82;}.cls-3{fill:#06ed94;}.cls-4{fill:#059b61;}.cls-5{fill:#1957ba;}.cls-6{fill:#6ca8ff;}/style>/defs>title>OAuth2_Proxy_logo_v3/title>path classcls-1 dM474.20933,196.63116a41.46679,41.46679,0,0,1-16.33506-3.18964,39.80757,39.80757,0,0,1-21.67092-21.83518,42.99409,42.99409,0,0,1,0-32.23,39.80765,39.80765,0,0,1,21.67092-21.83518,43.41665,43.41665,0,0,1,32.67012,0,39.8101,39.8101,0,0,1,21.66989,21.83518,42.994,42.994,0,0,1,0,32.23,39.81,39.81,0,0,1-21.66989,21.83518A41.485,41.485,0,0,1,474.20933,196.63116Zm0-14.07985a26.63714,26.63714,0,0,0,10.28431-1.9799,25.89889,25.89889,0,0,0,8.36072-5.50012,25.04229,25.04229,0,0,0,5.60963-8.525,31.04294,31.04294,0,0,0,0-22.11,25.07963,25.07963,0,0,0-5.60963-8.52549,25.9145,25.9145,0,0,0-8.36072-5.49961,27.6962,27.6962,0,0,0-20.56965,0,25.89233,2

Subdomains

Date	Domain	IP
bejobs-backend-staging.staging.eks.romcore.cloud	2026-01-29	54.154.113.115
login.staging.eks.romcore.cloud	2025-03-13	34.255.167.162
dex.staging.eks.romcore.cloud	2024-09-27	34.254.23.224
bejobs-backend.production.eks.romcore.cloud	2025-08-05	52.210.83.192
bejobs-backoffice.production.eks.romcore.cloud	2025-10-14	52.48.101.78
bejobs-portal.production.eks.romcore.cloud	2025-10-09	34.249.111.32

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.staging.eks.romcore.cloud

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains