Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Dvirg
Explorer

FW access to domain "accountsupportteam.com"

Jump to solution

Hi,

 

Our CP Firewalls are constantly trying to reach out a domain named "accountsupportteam.com"

according to some sources in VirusTotal this domain is recognized as a malicious domain.

Does it familiar to someone? Why are they reach out to this domain? 

0 Kudos
1 Solution

Accepted Solutions
Dvirg
Explorer

After an investigation and help from CP-Support, I found this object in "Object Explorer", and it turned out that the GWs are validating FQDN requests.
Thank you all for your help.

View solution in original post

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

What kind of gateway running what version of code?
My guess is that one of the clients is doing it.

0 Kudos
Chris_Atkinson
Employee
Employee

Reach out how? Are you able to share a redacted log card for the communication...

0 Kudos
Dvirg
Explorer

After an investigation and help from CP-Support, I found this object in "Object Explorer", and it turned out that the GWs are validating FQDN requests.
Thank you all for your help.

View solution in original post

0 Kudos