Domain > branch-test.step.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-06-18	52.9.39.10 (ClassC)
2020-12-02	13.57.151.101 (ClassC)
2021-02-15	52.53.99.37 (ClassC)
2021-12-16	13.57.120.178 (ClassC)
2022-03-02	52.8.154.160 (ClassC)
2022-03-02	52.8.180.232 (ClassC)
2022-10-16	52.9.35.28 (ClassC)
2025-11-17	44.230.115.150 (ClassC)

HTTP/1.1 200 OKServer: openrestyDate: Fri, 17 Oct 2025 02:01:37 GMTContent-Type: text/html; charsetutf-8Content-Length: 5812Connection: keep-aliveAccess-Control-Allow-Origin: *Set-Cookie: _s%2Fwe45Rbx

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefandroid-app://com.step.dev/step/open?link_click_id=1507551432712506185 />			meta propertyal:android:url contentstep://open?link_click_id=1507551432712506185 />			meta nametwitter:app:url:googleplay contentstep://open?link_click_id=1507551432712506185>			meta propertyal:android:package contentcom.step.dev />			meta nametwitter:app:id:googleplay contentcom.step.dev>			meta propertyal:android:app_name contentStep deprecated Test />			meta nametwitter:app:name:googleplay contentStep deprecated Test>					meta nametwitter:card contentsummary_large_image />			meta propertyog:image contenthttps://cdn.branch.io/branch-assets/1579196831243-og_image.jpg />				meta nametwitter:image:src contenthttps://cdn.branch.io/branch-assets/1579196831243-og_image.jpg />			meta propertyog:title contentStep />				meta nametwitter:title contentStep />			meta propertyog:description contentMobile Banking built for teens />				meta nametwitter:description contentMobile Banking built for teens />			meta propertyog:url contenthttp://branch-test.step.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to Step deprecated Test!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.688,0.623,0.824l7.824,3.131l3.679,6.438  c0.176,0.309,0.503,0.5,0.857,0.504c0.004,0

Port 443

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefandroid-app://com.step.dev/step/open?link_click_id=1507551432853798557 />			meta propertyal:android:url contentstep://open?link_click_id=1507551432853798557 />			meta nametwitter:app:url:googleplay contentstep://open?link_click_id=1507551432853798557>			meta propertyal:android:package contentcom.step.dev />			meta nametwitter:app:id:googleplay contentcom.step.dev>			meta propertyal:android:app_name contentStep deprecated Test />			meta nametwitter:app:name:googleplay contentStep deprecated Test>					meta nametwitter:card contentsummary_large_image />			meta propertyog:image contenthttps://cdn.branch.io/branch-assets/1579196831243-og_image.jpg />				meta nametwitter:image:src contenthttps://cdn.branch.io/branch-assets/1579196831243-og_image.jpg />			meta propertyog:title contentStep />				meta nametwitter:title contentStep />			meta propertyog:description contentMobile Banking built for teens />				meta nametwitter:description contentMobile Banking built for teens />			meta propertyog:url contenthttp://branch-test.step.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to Step deprecated Test!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.688,0.623,0.824l7.824,3.131l3.679,6.438  c0.176,0.309,0.503,0.5,0.857,0.504c0.004,0

Subdomains

Date	Domain	IP
pf.step.com	2025-11-10	35.244.159.249
stg.step.com	2025-01-14	34.107.227.160
api.stg.step.com	2024-11-24	34.107.227.160
admin.stg.step.com	2025-01-14	34.107.227.160
help.stg.step.com	2024-11-25	34.107.227.160
api.step.com	2023-08-16	34.160.150.172
email.gh-mail.step.com	2025-05-10	34.102.239.211
ablink.mail.step.com	2024-10-04	34.160.150.172
admin.step.com	2024-11-25	35.244.242.115
join.step.com	2025-11-17	35.167.216.18
help.step.com	2025-03-17	35.244.242.115
assets.step.com	2025-10-10	35.244.215.127
branch-test.step.com	2025-11-17	44.230.115.150
www.step.com	2025-11-10	34.160.243.22

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > branch-test.step.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains