Domain > autodiscover.cqs2s.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-12-21	104.21.11.21 (ClassC)
2026-02-18	172.67.131.199 (ClassC)

HTTP/1.1 403 ForbiddenDate: Wed, 18 Feb 2026 16:23:59 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9cfedf4249d9da91x-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?seHrcuGb3MlGK%2Ff5O1gS8HEKZaQiK9%2Fzpb3KumfL3d70vdBZfzUqn2R24qQMx%2Fw3naltpQCNvKVs2C8lbtDO8Odh4K2sxJcU%2BXlrsGDiKAkR%2FXbNWs8ORSjVqgSQdBcYTjb9LTjKhJuJh},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Server: cloudflareCF-RAY: 9cfedf4249d9da91-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0tMS4wODQgMS40MjdxLjY2IDAgMS4wNTcuMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: autodiscover.cqs2s.com,cType: managed,cRay: 9cfedf4249d9da91,cH: BJDarys0PHbqA5oBlqeeWdQE_ZA1CEEQ2SXWXJpyVqU-1771431839-1.2.1.1-89RhyDHLCv2fl3KuirqOhfoMtis5mok4cFWK7Es4.Mv952M8mIZ8fhY1hNkuwGUv,cUPMDTk:\/?__cf_chl_tkGG94KrA_0014yPGO7yTA35sCqTXkUcgFZxml0xRtY2U-1771431839-1.0.1.1-br8T35He8KsU78xByMO_D1yvHDNhUIVN3KeBUMZ5Zw4,cFPWv: g,cITimeS: 1771431839,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tkGG94KrA_0014yPGO7yTA35sCqTXkUcgFZxml0xRtY2U-1771431839-1.0.1.1-br8T35He8KsU78xByMO_D1yvHDNhUIVN3KeBUMZ5Zw4,md: Ia2t34WGI_gq3YeqjxWtQ4mJpSopqgWwHGBpb5HqORU-1771431839-1.2.1.1-qKefNtf.26ctLblwHZhIb0ELlZf_gR4jbNp5Fj29_JzxKaLjYJyRNKhO8ejdHi6pKZG5LhmjQbvIZ5E_gpd2k5J3vEQdCvS.TAxNSDjSqwxlvFWvCDRG7esAhQL.YBUWG2dc9KcZQDv6FIcOSFKzYLKea2fmd.ATrbP3bm0aIrkNXHz3KT8ddqCR.08Oc06zs_ZTLxovajk1KiSGLSf0.vCan8kH9Teli7.jcKTK2_Ur6MjWzoPHDf7Q7pxXkHohPzhr0A96IOBUZdCor1ggi7yJejnK._qw14668hxDUunmXXO319mWKEICRHxHob1fyTaDk9af9I6bzlAhdW2DC.IWTaYSMfsxI40Lw6zlgXVWFPNK7_iEyWgOIsrvzVFtS1A58F7ncdbC.GL.EhDDFjzO35xv93A7RdeRQzYtSg1SUmK9X7EptHHiMRPIo60fbyT6K3TWY7OqgvCF1epd3XlH9GSsFDqz1TZ12Gb1.YXqxyn7HQV7gSHk.49vW6WpmTG_vin3dkxSH3R0xAj_49W.nkNX3NstaVcszeT7yw.uuZNqE6UIVbde.WcdZdekhmpUEQdpEIlstmzaA7WwzJ8EkPIizVqJjAw6vTiNE0U5SK5oaiTJc5yS8MZE3LpCisINepSi6JBAyI0yfOsl_ecEcj5B5QJTTfpQjGg8q_Vl6JBMooqbvSlOeCxT2DNujwDDphTql6is5hKcwHsmGgddlDAUTiYp._uU5fSkb6gsAxhK5SrlYvAivcO6dahS7AugCi1z8rqqxWZEAyoMOB7PVHdgDnBrMaZ30SBhj0Q,mdrd: Reu7oq11UbH8cJgnaFkP95wAd7bqCHa.L2glixN7e5I-1771431839-1.2.1.1-9HfgxL3YejLhY_s1uF6GiCjbpTwk.ZbN5ovdwaEhYxyV9cbCwKr7am83JaqurcY3uYTgZVYSbjNSWveeWrfGwv5bpsyfnJQw8YONpqzC.xFbai79JY7sT1vA2KSC12LY_VglbL8q2Vg.QjyYMCtFsIIZz.RY6Ptvv_ZnEIOm_D56ncRrUnEzJIqqMwouo6LiHvMToQgUtvn4TM76xyiIE4ws5sp8OBH260C4Rr5u6NGZZWrmqyh0gK8Xl82ziU8gpfA.AAvaX0aLkhrQ_uqZmbNVcyaDA.BC9CQxcRohD6ie7eUUspvDNZeOdg9C9SzSEF03fJ5_AWCQdqLVK21Vm48EiW6Cewt7SvHr5yLcqUX6Zh5muQynobk7JNXj.PhYHdzCv14mD3nQUiplIrwDAMI_hHhVrSgDV5HVx.g_Qvr8rh7K.CCBTKOtWJVp4u6_eqsXA8nic0SxKiTs8dgPmq0ktjERMJea_7nikOGSX2m4DipeIMBS7Se8TeGDHzjqOSy3PB746jkfXx_xgl2Az3wdDLuOfPvne6HKVfQENL6DA99m84_MHc5A9VMjDrVeBHMHWDX9AbLCgE1rCD3YFP18rmRtUzo5KiVUMDs6_7KnVyXTgdnUPz73mcP3dt9vWazqNvEKFBKIzNnhKuUdyFkKXB1waw0AZcSKNCHvVAZfkW2FUZY.5yklKZA5CJ9xRpVB8kkiZPDdwb6nEPD85C0QCaYcEcru368yMzJYxYpOUw7BYXBPVcG3wXy3TQXoNejesELWxD1aLXe4Dm6ZWV_RiejLHb6B4R6Wh5NdFm42nWVX6NjVxe6g6tZ1WrUL1OFh6sFvEQwQKa8nz3x11PU5WGsYCoIdn.a9q_At93ATyAEutC0Vkih4w5RTz8xiRRABZc4d.uzcV5rtFQAMB607Q.s7huGrFkNnlHTC13XTYPhIOwDQ_uvV5g7V.c5UBHkwbcg6sIPl0f3xdxq7YBrt.D2cvbPm3mSXTx2EujzLSzIyZopXmeLcenDSMzcp2jLoEqF1KU7ZO7tyhT.5dBXK_dYNBdHmdWnICCgwCF0G8sNN7ZvnfkQsxN505tQ_4iWi.46f.ztIv60KfJqAbWLEgv0xDWz9JFYdyEtk90cpJrTtatAGRX4jMq_7Ofjzm7fvIW9qoAL3rTx7sAlEPiV1fKNkMnfQXZ7H_j6E9bnO4RJlhZW.F6SSxAQXUVUOZa8y2P8RrO2FKTh9w.kXrxYcGNciGlSxF6w_h59aDwkQ2hCARkAst3iz2mQHO_6niP4mxoIw_hnWPC51TxnKg37meDjdwxG.J.KMnS8Gu1QSdI9P3Dtv92ttIZj3JXSFn7IXqT6_Bg63d9yg7njiEEU5df_KTDeBEgCxOYgiivkZuMKXptL4eMROWxhWZijnhIBkqY3Oih.zL6jT.yPKbvvNAKbZlorqSVFHrQ7hdo54JtiHvLhBd5paMzHly75wcr..BLVihF27tFyUZ7rfEpFyurB9eaGMgQMOyHaA8tWOQm1VVfPgCFUjIYQCBxbSgiOfXR3kRq0BI5QVkugU3DATspTitKr11VDT8EfKpuYB0hMIDce7kOn7JuahNeKs290ThI2j9zLw_th0k_8BQ7MRMLJqYAD4CfMTVW0wF.mYlDX6ZSMA.7GG9IuNrBTqJuq1Nc19koVqAZZYAead8r7Zt.Z6UbtMiclp2YSk9CdSNaFmLlncZQ42S2ZcQv7UZUHn7opX8e31S3VVnm4stBgjjCHOAUAViaGSbSP2qTuR.CeBWZ1vGDwyz0P4sIJBjwuimqi4aIGqiVIMp2QX8chelVf0zmj75sDI22RorS_i4bUQU7CpB.OLFJfN3xvD6_jfbQ0glaPdq_tAl_YwdQGuVgrs.cX2qfiIXLY7QRTleS9GTljPYA6ZKijmFFGU07nPqS1VvjQW7hmhncfcLd4qphXarWDHqxQVjFGmCj2cOLrQhCMmnaK6adPwlaJyhSdxQadm1XLE4WFRfiSwKw,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray9cfedf4249d9da91;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkGG94KrA_0014yPGO7yTA35sCqTXkUcgFZxml0xRtY2U-1771431839-1.0.1.1-br8T35He8KsU78xByMO_D1yvHDNhUIVN3KeBUMZ5Zw4+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autodiscover.cqs2s.com

Is this malicious?

DNS Resolutions

Port 80

Port 443