FW access to domain "accountsupportteam.com"

[Dvirg]

Hi,

Our CP Firewalls are constantly trying to reach out a domain named "accountsupportteam.com"

according to some sources in VirusTotal this domain is recognized as a malicious domain.

Does it familiar to someone? Why are they reach out to this domain? 

[PhoneBoy]

What kind of gateway running what version of code?
My guess is that one of the clients is doing it.

[Chris_Atkinson]

Reach out how? Are you able to share a redacted log card for the communication...

[Dvirg · Accepted solution]

After an investigation and help from CP-Support, I found this object in "Object Explorer", and it turned out that the GWs are validating FQDN requests.
Thank you all for your help.