Domain > erp-me.makuku.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-26	43.159.108.101 (ClassC)
2025-11-15	43.175.7.2 (ClassC)

HTTP/1.1 200 OKServer: Jetty/5.1.10 (Windows Server 2008/6.2 amd64 java/1.6.0_07Expires: Thu, 01 Jan 1970 00:00:00 GMTSet-Cookie: JSESSIONID18ux9n9o26w9j;Path/Content-Type: text/html; charsetUTF-8Set-Cookie: GUEST_LANGUAGE_IDen_US;Path/;ExpiresSun, 15-Nov-26 07:10:17 GMTSet-Cookie: COOKIE_SUPPORTtrue;Path/;ExpiresSun, 15-Nov-26 07:10:17 GMTContent-Length: 1856Accept-Ranges: bytesConnection: keep-aliveDate: Sat, 15 Nov 2025 07:10:16 GMTEO-LOG-UUID: 16687569692983275189EO-Cache-Status: MISS

!DOCTYPE html>html>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />title>首页/title> link href/html/nds/css/login.css  typetext/css relstylesheet/>script languagejavascript src/html/nds/js/jquery1.3.2/jquery-1.7.2.js>/script>script languagejavascript src/html/nds/js/theme.js>/script>script languagejavascript src/html/nds/js/login.js>/script>/head>body classLanding_interface>div classlogin-panel>div classLanding_interface_top>/div> div classLanding_interface_cont>form action/loginproc.jsp methodpost namefm1 idfm1>input typehidden valuealready-registered namecmd />input typehidden valuealready-registered nametabs1 />p classbor_bot bor_bot1>span classlogin-ico ico1>/span>input idlogin namelogin classLanding_interface_input1 typetext value placeholder用户名>/p>p classbor_bot>span classlogin-ico ico2>/span>input idpassword1 namexriocjwowt_password classLanding_interface_input2 value typepassword placeholder密码 />span classsub mt30 idlogin-submit onclickPortalLogin.submit()>GO/span>/p>p classbor_bot>span classlogin-ico ico3>/span>input idverifyCode nameverifyCode typetext onkeypressPortalLogin.onKeyupLogin(event) value classLanding_interface_input3 placeholder验证码>span classspan>img idchkimg src/validatecode.jsp width101 height20 onclickjavascript:document.getElementById(chkimg).src/validatecode.jsp?+Math.random() />/span>/p>/form>/div>div idprogress styledisplay:none> div classspinner-wrapper idprogress>div classspinner>div classdot1>/div>div classdot2>/div>/div> /div>/div> /div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > erp-me.makuku.com

Is this malicious?

DNS Resolutions

Port 80