Domain > autoconfig.agora-cs.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	khnkxhzs9qf1z2qf@private-contact.com
NameServer	DNS2.MIDPHASE.COM
Created	2004-08-09 00:00:00
Changed	2014-04-19 00:00:00
Expires	2016-08-09 00:00:00
Registrar	BRANDON GRAY INTERNE

DNS Resolutions

Date	IP Address
2024-07-27	104.21.7.236 (ClassC)
2026-01-29	172.67.156.137 (ClassC)

HTTP/1.1 200 OKDate: Thu, 29 Jan 2026 10:24:33 GMTContent-Type: application/xmlTransfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareVary: Accept-EncodingNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Report-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sHb8Vq5Nn%2BBxl%2FrMgthVLneLbuWpyTdUBhAUxpI2eAjfSoQGRVNxB9CAVKqwpy3PRryZmrDn4L%2BDB5T8K7JIkZS9Aig9m8XdEaBSxuEq0yC9oaaBfDm88}}cf-cache-status: DYNAMICCF-RAY: 9c58053d8bd58ce4-PDXalt-svc: h3:443; ma86400

?xml version1.0?>clientConfig version1.1>    emailProvider idagora-cs.com>        domain>agora-cs.com/domain>        displayName>agora-cs.com/displayName>        displayShortName>agora-cs.com/displayShortName>        incomingServer typeimap>            hostname>mail.agora-cs.com/hostname>            port>993/port>            socketType>SSL/socketType>            authentication>password-cleartext/authentication>            username>%EMAILADDRESS%/username>        /incomingServer>        outgoingServer typesmtp>            hostname>mail.agora-cs.com/hostname>            port>465/port>            socketType>SSL/socketType>            authentication>password-cleartext/authentication>            username>%EMAILADDRESS%/username>        /outgoingServer>    /emailProvider>/clientConfig>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autoconfig.agora-cs.com

Is this malicious?

Whois

DNS Resolutions

Port 443