test.support
Classification: Malicious
test.support is a malicious hostname. Linked to Cobalt Strike malware. Reported by 1 threat source, last seen 2023-08-22.
Current activity
- Online — resolving/reachable. Last checked 2026-09-02 12:35:42.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Intrusion sets: DARKHOTEL (G0012) STRIDER (G0041) BRONZE BUTLER (G0060) TURLA (G0010) LEVIATHAN (G0065) MUDDYWATER (G0069)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nitro | Maltiverse | 2023-08-21 04:13:34 | 2023-08-22 20:40:49 | malicious-activity | |
| Darkhotel | Maltiverse | 2023-08-21 04:13:37 | 2023-08-22 20:40:17 | malicious-activity | G0012 Darkhotel |
| Ice Fog | Maltiverse | 2023-08-21 04:13:39 | 2023-08-22 20:39:44 | malicious-activity | |
| Projectsauron | Maltiverse | 2023-08-21 04:13:41 | 2023-08-22 20:39:12 | malicious-activity | G0041 Strider |
| Cobalt Strike | Maltiverse | 2023-08-21 04:13:43 | 2023-08-22 20:38:38 | malicious-activity | S0154 Cobalt Strike |
| Tick | Maltiverse | 2023-08-21 04:13:46 | 2023-08-22 20:38:05 | malicious-activity | G0060 BRONZE BUTLER |
| Turla | Maltiverse | 2023-08-21 04:13:48 | 2023-08-22 20:37:33 | malicious-activity | G0010 Turla |
| Careto | Maltiverse | 2023-08-21 04:13:50 | 2023-08-22 20:36:59 | malicious-activity | |
| Leviathan | Maltiverse | 2023-08-21 04:13:52 | 2023-08-22 20:36:26 | malicious-activity | G0065 Leviathan |
| Muddywater | Maltiverse | 2023-08-21 04:13:55 | 2023-08-22 20:35:53 | malicious-activity | G0069 MuddyWater |
| Fastcash | Maltiverse | 2023-08-21 04:13:57 | 2023-08-22 20:35:18 | malicious-activity | |
| Predatory Sparrow | Maltiverse | 2023-08-21 04:14:00 | 2023-08-22 20:34:44 | malicious-activity |
Tags
aptIP addresses resolved by this hostname
- 3.233.108.250 (2025-05-05 12:13:08)
- 3.233.187.46 (2025-05-05 12:13:08)
- 54.157.2.211 (2025-05-05 12:13:08)
- 2606:4700:3035::6815:2b78 (2026-06-19 16:20:46)
- 2606:4700:3037::ac43:b30f (2026-06-19 16:20:46)
- 172.67.179.15 (2026-08-18 04:33:43)
- 104.21.43.120 (2026-08-18 04:33:43)
- 2606:4700:3033::6815:2b78 (2026-08-29 20:34:49)
- 2606:4700:3034::ac43:b30f (2026-08-29 20:34:49)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-09-02 12:35:42)
- 172.64.80.1 (2026-09-02 12:35:42)
Whois information
- Domain
- test.support
- TLD
- support
- First indexed
- 2023-08-22 20:34:44
- Last updated
- 2026-09-02 12:35:42