Domain > autodiscover.romancewave.xyz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-30	172.67.128.96 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 30 Nov 2025 02:21:56 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9a66dfcd1e251a0bx-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sYW5CFndPmV1RXfPgKo5Rnf5%2FPhj13TDFIXJy%2FVAIjC1dsfeahXXjqMZZ5kC6qr6sj12urjHbGMXZBcsW1AdysoGDcGrPYoVwTxRdBWnwEBMrcXrGgFhhBG5ZG48SvfwhT7JxPtMfisCu%2FY5jPZqg},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Server: cloudflareCF-RAY: 9a66dfcd1e251a0b-PDXalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt6064&min_rtt5496&rtt_var1954&sent4&recv6&lost0&retrans0&sent_bytes2864&recv_bytes739&delivery_rate491263&cwnd252&unsent_bytes0&cid416a9ccc515ccad3&ts27&x0

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: autodiscover.romancewave.xyz,cType: managed,cRay: 9a66dfcd1e251a0b,cH: 13pgsDwynD7cDlUMNoThCFTLIbPDuMMNtKSzacnd92s-1764469316-1.2.1.1-ffbRn6gbsi9q6pbw.5o4NzN0WgI.OObu0KaPpgn.czIBpoXCzlCkNh0xcM_c8c.b,cUPMDTk:\/?__cf_chl_tkgGTeL0TxyxFM3ZiEhTywc8JY5KF5Oh2h3kuew58bQAU-1764469316-1.0.1.1-V4QhUvWloEMGBu8jLmrzFBSqophhV5jr_.Pa41Qr3bk,cFPWv: b,cITimeS: 1764469316,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tkgGTeL0TxyxFM3ZiEhTywc8JY5KF5Oh2h3kuew58bQAU-1764469316-1.0.1.1-V4QhUvWloEMGBu8jLmrzFBSqophhV5jr_.Pa41Qr3bk,md: c12PkCsesSu0X7YkS.672gk8FgQEAY.JfQ5jgyGo9zg-1764469316-1.2.1.1-5mXSggiKptAFNvOO09MgC5wsXwRQFFSMLjnvpSGevYRpO_FlCGvV5di49Ad.mBbyFu6OZl3J9KofbxJGfAR5basLTuvdpNeSLUesE7nClgy92MJXUsbIqEJ4PtIpKJdYwP70mAhiFBUUuiNSTishmwCjIMGbIWx1gp9FPZwcdPRAwlHg.hdMZjv9CgA7LTB.As1Eq0IVVF6rIzh.5t9miTnyhGxdj3N.UI_y3G6cu6ACt6dHbXKdHAACZk0WEszC3glV0WBdyNKKwFNu9ZmiRs.tcRBkfS.YcZeXwhmoytOaVCOllt4K6YauvttIfMFDSCenoUc8A4GIFV_tthe4yN8G41mY8aknLx.fntO6obSqbEWKqCby2ReY8P5q_aWcTPhm_knxIsXthsmydzcVUInoIu_Ru79PyVdd.R7RNTklIpCQFLcwGYSWMc2eF0MRMldp5RRR9dkASpDkCJjmfsyme41Iz3zPtLzxs80oxdNEQuufYMz7gO2fKcVGKcQ5A4cmzlEUk_xDNsgS6.lDJu2leCuNzE2uYLcjUo.Hw1nGfU_.5hHE29nd.kycwzGnCRk_0qDolFl2nJNG0FrF52kRMDHHdRfFAu.9Auo1PdGIVGFusDkeBuGoVdqOhMyGjwvuXYVdi_OUvZG8CTAGlg3EYnHinke1ZS8lEs9314_7w5m37MKbwC2i8vBlCu0n14.7maRJXPin8Cpg9buc.yFBIqdo__8mlmma8QdIthewoRZbDzG8_ryrI5MY1iHyf.xYEiksGnLzV5jFVjc6EFrmL4Bu1TEqLnhW1CR2pcI,mdrd: smBYPxRp1FK0VvMN.SpyMDzfIKWAYDp.UyrP16F0QaM-1764469316-1.2.1.1-syuU6z6UdWl3MSjtiwXYvAVs1D5pMwulwhoIUWcx7ZHdbFuv3fupWNz3OZMqSlYcjZo_A865pHKt8PLi_A5gf0HUfEnkZjl1PPpISyzrYOXOo7cmkhX8irtY5DMU8E5pSIxK2oSwXiK4GmWeStgDbhl3LxmQNxQZxqibMwTwgfkYAxGkvD_cPaRPyfWq2yCPjLQ6yYkcvG15xTRqATEYcnApcdtDje0kRghF9VX.Hehm_Q1ro7UeBkktch6.8mYY6RnNYpdHepAjnioRYD_p8iUBglLbFFun8.2WFn_V165N5s0yZyI9l316dX1GmyuJewmDCx8e1mj93RlA4STkLjwmkNfefsi4Mwx07jqZphCL5hEqb1hPPBKrx_i7o864oNImxh_Mp4E7iRpWvC5hIsCUlQTyO5AxnxfMAT1P9ehB8.D0O0ZrbSmiZbZ2g9HDQBWPZ76xHCQCcpsAVaxZBeHtPFALH1i7j0nGJZHglb42A.6blQUAstZ1r5rj0B6i0WBkROVwgFlP0GBG5sN86JE1Ow_0CrkhrOElVOnjombye9dFa3CTHc7br500MXvmVrOzqmszsHTdHFavaMqYEcDo8Zmuqrb2qEtoRooqJw0GdHdtvRPLBw6Sw5J4V0C61Yj8KpiV1H1UFY8s2QZOrzDKor0cFLu5sUtP.7lwrdEESBLWqyRiVZqQGf.fdgv.ZCXq32yQfufTiIWtgSamh.73vPsgO5MMVdOL01wZnqITE_x5yuIrK4xKJ2uZnQVzwz2K2uWzNnQ7i0VK9jylqibbTMP_gM1GqbIn6fh08YRzXKVxBzD0NuO7BAQ_A0c3KSJpIEAWN8LHCaXAM5Ru7eQrBN6_TZBbRQCD7H2jUajoEgvV359cxanQp5YC3pv0mzuCzJrJ3j8tNka3d47VMhn9DHuu3adUOqvf3cd6X3X553i5Nt0OPKr7Rq.PJYoMVIl88HQNdnGl.mYgNPr741Smk5LN2Pvj6hgDzD6iW4YHYTOmUf2ky3N3LBEVEyvBf5jzNJjICRfgLJWtJwox3Z75VPI.Phe3zuCZFXDX9E6r3jxC5KQnPYuDUvKhT1BtXEBs9kLxJS6hgqrI11s3KTSCpSSDR1ZbFvjPk7CCqpLPQEvoD1yfuy6_HyRl1AdOlMHa1VHagI0h5qnHGSdK3zvtb2ON1kFFT0Q.ZkLbRRBtZsxVatnJgJgtXUt8gXm.pK0LB81Kmjc61_Yf.6p3TlpKKC0NmPj844GN9tv1uZD0RGVaFZq83kVuwYHAor3.53oOvY8hdsPeJZ4XLvjDtHEqM3HDqAjsT9bLJ8iCjwSZRzXGUqbo_nmJowR03n.HavYsTJF.TooGc8N6_L1mkrQv14thG6VP7kwZUiXOkpPmRIviVSSCmyCcGXD2OkKrTr6o6FL9YO_rdyS9m54h58v7Afpb.1Y40Y11r0m5M_AFArBThsrUKLp5WMRqrI63WAE6ZDVdvc4um1a_ymeH0wEgtbzZnw.mpH_5YiMAp5wU0N97.WsQa720NubodrVKhgl6Bqwvb3Cy..cyGcjYqlcFYB95b5KdgtRJ.6GOppLWOUJ6YKZWFj.bUhFlDbPeYWpA0Z1kE3N20UOaF13vVMlMrCZLcTXeQfq.I9RraGbhv2DbXOE04XC6awW8O3riQ1g7QaXgyUiL_sUyVvOtdM4B6rAPeDCwWgAWfHS83Mmnw6icqoMJP0AGqhtsSsyakVoEhWQdBwV7Jx2nPIGZJ_gpDJTni9tK2cYZ4PMY3Zu3PsV_tsyYtowOmB6ef6Itj07zvY1r1aRpf.2w3HyqNXqs1D1TmcuUERlNIdpnSYSSJgxRb4Malg10_0VP2Mgm9C.5QpmEcLBHcBywiOtEhuzWCBAFy.b8QaC62yvOsVgikooYWRuQxuYnE1bjIHVoTtQZ09_JmN8V.Cb9a4mdMQXBicMJRuB6Rhp0IDL_fKRfcPkxzUYIUvost7xsW7b_a434RM3YKe_T75I1qXngLA,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray9a66dfcd1e251a0b;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkgGTeL0TxyxFM3ZiEhTywc8JY5KF5Oh2h3kuew58bQAU-1764469316-1.0.1.1-V4QhUvWloEMGBu8jLmrzFBSqophhV5jr_.Pa41Qr3bk+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autodiscover.romancewave.xyz

Is this malicious?

DNS Resolutions

Port 80

Port 443